Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler a=lmandel
bug 1040446 - mozilla::pkix: add error code for CA cert used as end-entity cert r=briansmith a=lmandel
bug 1034124 - allow overrides when a CA cert is used as an end-entity cert r=briansmith a=lmandel