Merge "NativeCrypto: adjust BasicConstraints check" into jb-mr2-dev