Compute SKI via RFC 5280 method #1.

This is the same way SKIs are computed by OpenSSL, and provides greater compatibility.