Bug 1030204 - 1/2 Name constraint ANSSI(DCISS) Root cert in mozilla::pkix. r=keeler

--HG--
extra : rebase_source : 221ca75af601649731bf83cace2e6b0edcd4b2ab
Bug 1030204 - 2/2 Tests for Name constraints for ANSSI(DCISS) Root cert in psm. r=keeler

--HG--
extra : rebase_source : 0b64f7206446a8c414df5b0f4a9653f0180b8b44