(ITS#5700) [enhancement] add support for certificateListExactMatch (RFC4523)