Store a reference to TBSCertificate in x509_cert_t

TBSCertificate is the part of the X.509 structure that is signed, and we therefore need a reference
to it to be able to check the signature.
Correct possible bug where invalid V1 certs parsed as valid