customssl: a C extension wrapping call to ssl X509_verify_cert.
Will allow to perform PKIX validation for some tlsa records.