bug 1042889 - use a separate error for untrusted x509v1 certificates used as CAs r=briansmith
bug 1042889 - allow overrides for untrusted x509v1 certificates used as CAs r=mmc
bug 1042889 - test certificate overrides for untrusted x509v1 certificates used as CAs r=mmc