Make the builder aware of SKID/AKID, break the internal circular dependences Reviewed-by: mullan
Do not consider CA target certificates if selector.getBasicConstraints() == -2 Reviewed-by: vinnie