add RSA_DECODE_EXTRA to RsaPublicKeyDecode() to handle OpenSSL-generated keys