nx_x509_rsa_root_gate.nx

nx_x509_rsa_root_gate.nx -- THE RSA CRYPTO KAT the x509 family was missing (honesty [W] follow-through): self-signed RSA roots from the REAL Mozilla trust store verify their OWN signatures through the exact flagged organs -- nx_x509_pubkey_extract_rsa + nx_x509_verify_rsa_pkcs1_sha256 (2048) and the _4096 pair. Self-contained by construction (a root's issuer == its subject: no chain-