support for using "raw" BC APIs when creating an extension
critical flag is optional in the ASN1 sequence
fill RaiseException's cause whenever we use a factory passing down a Throwable
X509::Name housekeeping - use a X500Name builder and cache it
optimize "every" milli-second on bootstrap
adding null values in X509::Name seem suspicious - for now at least print a warning!
report OpenSSL::VERSION **1.1.0** since 1.9.3
one OpenSSL (Java) class / (Ruby) module to rule'em ALL!