X.509 path building follow-ups

[alex]

### For 42.0
42. [ ] https://github.com/pyca/cryptography/pull/10035
43. [ ] https://github.com/pyca/cryptography/pull/10036
44. [ ] https://github.com/pyca/cryptography/pull/10039
45. [ ] https://github.com/pyca/cryptography/pull/10229

### Functionality
- [ ] https://github.com/pyca/cryptography/pull/10044
- [ ] https://github.com/pyca/cryptography/pull/10042
- [ ] https://github.com/pyca/cryptography/issues/10276
- [ ] Relaxing places where we're too strict relative to other implementations
- [ ] Revocation checking (CRL, OCSP)

### Performance
- [ ] https://github.com/pyca/cryptography/pull/10050
- [ ] https://github.com/pyca/cryptography/pull/10047
- [ ] https://github.com/pyca/cryptography/pull/10051
- [ ] https://github.com/pyca/cryptography/pull/10052
- [ ] https://github.com/pyca/cryptography/pull/10056
- [ ] https://github.com/pyca/cryptography/pull/10054
- [ ] https://github.com/pyca/cryptography/pull/10100
- [ ] https://github.com/pyca/cryptography/pull/10069
- [ ] https://github.com/pyca/cryptography/pull/10092
- [ ] https://github.com/pyca/cryptography/pull/10121
- [ ] Use `WithTlv` on `tbs_cert` to avoid allocations
- [ ] https://github.com/pyca/cryptography/pull/10217
- [ ] https://github.com/pyca/cryptography/pull/10218

[woodruffw]

Another functionality follow-up: CRLs and CRL checking. This will likely require its own non-trivial design and planning period.

[reaperhulk]

Added as Revocation (CRL, OCSP) 👍