Merge pull request #1769 from reaperhulk/x509-extension-bc

basicConstraints support for OpenSSL X509 backend