return certificates in correct order from parser
renaming
real OIDs from rfc 3447
rewrite huge part of certificate verification
now connects to jabber.ccc.de for testing
add CAcert certificate as trusted marker