A Validity::Checker for r509, implemented with an OpenSSL CA DB loader backend