CertPolicy fixes for Windows