correctly check for message upper limit.
Corrected dane_verify_crt() to not deinitialize any input state.