refactoring

* CAConfig#initialize split into smaller & hopefully more readable
  methods
* CertificatePolicies validator restructured to be more readable with
  less multi-line control structures (of course, it's arguable if this
  is actually more readable, but right now I feel like it is)