More brs

Added BRs for
* validPeriodTooLong // over 60 months
* key size <= 1024 bits
* exponent <= 3
* signatureAlgorithm contains "SHA1" in the description
* version != 3
This is a bug. If the cert doesn't have basic constraints, then BasicConstraintsValid == false and the BR still applies. If it does, then the BR doesn't apply if it is a CA.