introducing #OCaml #x509 http://openmirage.org/blog/introducing-x509 ← nice to see readable TLS cert. validation code