Every TLS library will also have to implement it. I hate to say it but... I want a systemd-certd that TLS libraries can call into saying 'verify this please' a

Every TLS library will also have to implement it. I hate to say it but... I want a systemd-certd that TLS libraries can call into saying 'verify this please' and then the logic for verifying trust path, validity, revocation status etc can be done in one place, consistently and correctly.