More detailed DANE-EE(3) semantics

- No name checks
- No expiration checks

The processing of the rest of the certificate is now unspecified.