subject: Start figuring out how to build subjects...
Now when we have a CA cert and a client id, we can start parsing the CA certificate and generate new subjects that should be accepted by the signing server.
The main trickyness here is the backwards-compatibility hack for a certain special-case of a CA certificate.
Based on !4 (merged)
Edited by Spindel 🕷 Ljungmark