Post #4026645

@foone@digipres.club and also complain if you don't have the x509 constraints set up to make it be explicitly a host identification cert