default to oid unless X509_CODE_MAP contains an entry

with test using haka signing certificate