X509 vfy continued

Builds on @lvh's work in #1156. Let's see if jenkins is okay with it.
Interestingly I think some of those comments started as `/**/` and then I changed them because some other comments were `//` already :)