When I wrote ctadvisor[0], I continually ran into issues with certificates in the chain that weren't encoded the way I expected. Sometimes it was legitimate - because it took a week to realise I occasionally hit an email certificate that looks quite different, and sometimes it was just because some CAs generate unusual certs.

Everytime such a thing happened, it would crash, and just plow on. I never actively planned that. It's incredibly powerful.

[0]https://github.com/technion/ct_advisor