Bug 1037324: Delegate additional name constraint selection to the TrustDomain in mozilla::pkix, r=cviecco

--HG--
extra : rebase_source : 300f33bfb3a0c9ae1525695b080674c1fb21eafc