- issue with Ed448 key parsing - strict generalizedtime parsing - error string difference: 'unable to get issuer certificate' vs 'unable to get local issuer certificate' - some possibly due to differences in exception handling? - some difference in get_client_ca_list (root ca included/not)