Fix perl bugs that had me printing the wrong cert number for errors

The exit code from the perl matters here

Add certificate validation tests generated using the tools from
bettertls.com, and a verification suite to try each certificate
in the same manner as the web based tests do using X509_verify.

This includes the list of "known" failures today in our validaion
code so we can move forward without moving back.