Reviewed-by: ohair

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: create regression test cases on name constraints
Reviewed-by: weijun

Summary: checking AKID of certificates and CRLs
Reviewed-by: mullan, weijun

Summary: remove the mask if certificate revoked
Reviewed-by: mullan

Reviewed-by: vinnie

Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie

Summary: Do not consider CA target certificates if selector.getBasicConstraints() == -2
Reviewed-by: vinnie