Remaining bugs:
# Enforce consistent handling of isCA bit and certSign/crlSign key usages: {{bug|970196}} (:briansmith)
# Add low-level DER decoder tests: {{bug|968490}} (:st3fan) [code written - needs review]
# Enable all PSM xpcshell tests on Android/B2G: {{bug|676972}} (:briansmith) [code mostly written - needs review]
# Add SHA-2 support to the OCSP implementation: {{bug|966856}} (:keeler) [code written - needs review]