critical fixes to SSL cert verification in StrongTrustManager

- ensure BasicConstraints exists and are CA:TRUE for all signing/issuer certs in chain.
- ensure KeyUsage is set to proper values (signing capable, etc)
- small optimization of only loading StrongTrustManager once
- ensure cert SN/DN is not duplicated, and all instances in chain that act as issuers have right to do so