Merge pull request #2220 from reaperhulk/encode-cp

support encoding certificate policies in CertificateBuilder