doc,test: account for OpenSSL 4.1 behaviours

[panva]

Accounts for OpenSSL 4.1 behaviours in the test suite and corrects the X509Certificate documentation to say the behaviour follows the OpenSSL default rather than prescribing what the default on a particular version is.

Refs: https://openssl-library.org/post/2026-09-09-openssl-4.1-alpha/

[nodejs-github-bot]

Review requested:

• @nodejs/crypto

[panva]

cc @mcollina @pimterry because of the X509Certificate docs correction.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.18%. Comparing base (b805fb5) to head (5cabde3).
⚠️ Report is 13 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #65956   +/-   ##
=======================================
  Coverage   90.17%   90.18%           
=======================================
  Files         771      771           
  Lines      265489   265489           
  Branches    50471    50470    -1     
=======================================
+ Hits       239405   239428   +23     
+ Misses      17042    17004   -38     
- Partials     9042     9057   +15     

see 29 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/77306/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/77321/