More complete X509_check_host documentation.
Drop hostlen from X509_VERIFY_PARAM_ID.

Just store NUL-terminated strings.  This works better when we add
support for multiple hostnames.
X509_check_mumble() failure is <= 0, not just 0
More complete input validation of X509_check_mumble
Implement sk_deep_copy.
Multiple verifier reference identities.

Implemented as STACK_OF(OPENSSL_STRING).
Fix typo in last commit