Coverage-directed Differential Testing of X.509 Certificate Validation in SSL/TLS Implementations