provide cert_type and cert_usage and cert_extended_usage as separate function
support handling of wildcard certificates