Pkilint

Fixes

- Clamp CLI exit codes (76)

New features/enhancements

- Add REST API endpoints for linting OCSP responses (62 - implemented by mans-andersson)

Fixes

- Handle malformed inputs given via the CLI more gracefully (63 - fixed by ralienpp)
- Pin validators package version to work around issue in latest version (65)

New features/enhancements

- SC-68: Allow EL and XI as the country code for VAT registration scheme (60)

Fixes

- SaneValidityPeriodValidator incorrectly reports "pkix.invalid_time_syntax" for negative validity periods (57)
- Decoder mapping for QcCompliance and QcSSCD statements incorrectly mapped to None (58)

New features/enhancements

- Add detection of SKI calculation methods described in RFC 7093 to SubjectKeyIdentifierValidator (56)

Fixes

- HTTP 422 errors from REST API do not return a list of ValidationErrors in some cases (54)

Fixes

- cabf.smime.common_name_value_unknown_source finding is incorrectly reported when SmtpUtf8Mailbox SAN values appear in the subject CN (52 - reported and fixed by hablutzel1)