Merge pull request #2320 from etrauschke/crl_vector_fixes

remove critical flag from cert issuer entry ext to work with OpenSSL …