do not assume this.value is an IRubyObject
allocate X509::Certificate instance directly (for less garbage noise)
also print warnings when **-Djruby.openssl.debug=true**
use our (native) Java APIs instead of routing through our Ruby methods
generated a serialVersionUID for X509's StoreContext
match X.509 extension short-comings of the Java API in order to align with MRI

for "composite" extensions values such as with subjectAltName we need to create one Ruby extension instance per composited value