Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=54353
There are two issues which the patchset is fixing: 1. Using cert's serial is not quite right, we need to hash full certificate contents as the check result depends on the other certificate data. 2. The check result also depends on revocation check parameters. I think currently it is only issuer certificate from the parameters which can affect the result which is cached.
-- v2: cryptnet: Also hash issuer cert for cache id. cryptnet: Use cert data hash as cache id instead of serial number. cryptnet: Cache revocation status in verify_cert_revocation().