Allow certificates with Basic Constraints CA:false, pathlen:0