testing timestamp format
improve error messages and use simple mech as default
add cert/crl check_mk helper functions
use new cert check function for crypto.utils to make implementation easier