Support for X509 certificates with the file analysis framework. Also supports parsing OCSP requests and responses.
base/files/x509/__load__.bro
base/files/x509/main.bro