I think this is pretty much ready to go? - #10 -- might be nice to get in, but it doesn't have any API changes - #6 -- no API changes either, I think Now that we added `CertificateError::Revoked` in rustls, should add an `Error::Revoked` here?