Issue raised by @mcr. >`s/X.509/PKIX/g` (It's not X.509. It's not even X.509v3. It's RFC5280)
Issue raised by @mcr.