bug 1009161 - mozilla::pkix: allow the Netscape certificate type extension if more standardized information is present r=briansmith
bug 1034124 - allow overrides when a CA cert is used as an end-entity cert r=briansmith