certificatePolicies extension in FDP_CER_EXT.1

[jfisherbah]

FIA_X509_EXT.1.2 allows the TOE to support processing of certificates that have the certificatePolicies extension but this is not explicitly specified as an extension that can be part of a certificate that the TOE issues under FDP_CER_EXT.1. It can be placed in the assignment at the end of FDP_CER_EXT.1.2 but could be considered for addition to the actual requirement itself.

Note that the STIP module requires the TOE to issue certificates with this extension, which is why this is being raised here. For now, the STIP module will just use the assignment to cover this.