list a couple of known issues related to reading certificates
add hint on finding all configured certificates
fetch SCT from log at startup, return to CT-aware client!

lots of kludges to be sorted out in the coming hours...