depending on X509 version, accept trust anchors which do not have X509v3...

... extensions