jurisdictionCountryName also must be PrintableString (#3516)

* jurisdictionCountryName also must be PrintableString

* flake8 + citation

* Write a test, which fails. If my analysis is correct, this is blocked on:

https://github.com/openssl/openssl/pull/3284

* This is only true on 1.1.0

* clearly express the version requirement
3 files changed