start hiding pieces of CipherStrings class since it's internal (... about to get refactored)
some SSL (context) related (small) optimizations - to avoid collision + faster matching
pass a hit flag whether we're going to need the suite set
allow X509::Revoked.serial= to receive an integer
re-package inner classes from X509Extensions into standalone ones (and deprecate)