User-provided data in verify

Useful when verifying certificate against dynamic nodes/certificate lists. 
Seems like it'd be a bit cleaner for this to be a `&T` instead of a `&Box<T>`.