Suricata

Reimplement these keywords using mpm, so we can write rules like this instead:

[...] tls_cert_subject; content:"example.com" [...]

This also enables us to use pcre to match on tls subject and issuer, and is a much better solution than the "strstr" implementation used today.