Check constraints of certificate fields not covered by certifcate validation
Some constraints on certificate are not covered by certificate validation (crypto):
- subjectAltName: check applicationUri equality, etc.
Check any other constraints necessary regarding spec (see Table 23 part 6, etc.)