Bug 921895: Check extended key usage in insanity::pkix, r=keeler, r=cviecco

--HG--
extra : rebase_source : f8faa0b9269a40dd28850c9444f4723d1dad8451
extra : source : 32ea705bdfd196e037060b3bb7da081c1eed356d
Bug 968359: Allow the direct validation of CA certificates in insanity::pkix, r=keeler, r=cviecco

--HG--
extra : rebase_source : f27870f2a648ad012d24b99d9e4f85daf17e9397
extra : source : 002e9043461b40a911903258d723c37133dbc79c
Bug 921896: Check name constraints in insanity::pkix, r=cviecco, r=keeler

--HG--
extra : rebase_source : 6d3e77670a5553b477a881609cc30f5f4140294c
extra : source : 2545cd47894a95323b718eb4f82be6d744019c7a
Bug 969938: Stop adding id-KP-OCSPSigning EKU to CA certificates in tests, r=cviecco

--HG--
extra : rebase_source : 9f5e42ea788e63fb93e3a37632be12093096e63d
Bug 970512: Remove uninteresting cases for certificate usage verification, r=cviecco

--HG--
extra : rebase_source : 6df6dcfb39f8b4e2cd063115470af04675c0f768
extra : source : 56e0904260b417ce181e2a35978f6d77e78ef2c2
Bug 878932, Part 1: add insanity::pkix as an option for certificate verification, r=keeler, r=cviecco

--HG--
extra : rebase_source : c1f75dff6ac7f32e082517af701654abebaee250
Bug 878932, Part 2: Make certificate verification implementation prefs dynamic, r=cviecco

--HG--
extra : rebase_source : 4b413cfd8e122ee4e0fea64d624285856e2cb0cb