server: don't just glue individual SCTs together; make a list using
        overall length and length of each SCT

client: deserialize SCT lists from certificate and/or ServerHello