Add support for certificate policies, as defined in rfc 5280. Currently support only `anyPolicy` policy.