Use Bouncy Castle

* basic constraints: detect CA flag and path length independently
* show subject alternative names
* libs: add Bouncy Castle and Apache Commons Lang