marked usage of signed ints for lengths in x509.h