* origin/pr/2484: Correct placement of ChangeLog entry Improve documentation of mbedtls_x509_get_ext() Adapt ChangeLog Always return a high-level error code from X.509 module Obey bounds of ASN.1 substructures