Relatedly, we should add a function on `Assertion` to check whether this assertion is valid for a given context (say, TLS domain or IP).