x509: add the api needed to obtain entries by nid

Also includes a large list of nids (from openssl/object.h). Might be
transcoding errors on my part there.
1. it only needs a lifetime bound.
2. yep, you're right (for Asn1String<'x>).