Fix validation relative to key usage.

If key usage is not present, then the certificate is only allowed to
CertSign and CrlSign.
bump version