SSL tests: port CT tests, add a few more