comment
move generic utility routines to ssl_ct_util.c/.h