Extensions checks.

Checks whether certificate has all extensions required/prohibited based on BRs with correct criticality. Also added small is_self_signed method to certificate, so we can tell whether the certificate is root or not.
What's "good" about it? that there are no observations for it? 
If that's the case, perhaps the test name could reflect that.