OpenSSL’s code quality, in general, is really shit. ASN.1 and X.509 do not inherently bring security issues, but the risk increases if you try to support every edge case. (Don’t.)