Reviewed-by: darcy, weijun
Do not consider CA target certificates if selector.getBasicConstraints() == -2 Reviewed-by: vinnie