> I have slightly different plans. But first, do you agree that the _ssl
> C extension and all its methods are consider an internal API? How
> about the _ssl module's method returns X509 objects and the Python
> module calls methods on the X509 object like get_info() -> dict or
> get_der() -> bytes?

Sounds fine, yes.