Added support for additional certificate access flag 

As requested by Verisign labs [Eric Osterweil],
Per change in draft spec. http://www.ietf.org/mail-archive/web/dane/current/msg06180.html