bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith
bug 990603 - test override for server certificate with basic constraints: CA=true r=briansmith