check_chain_extensions(): Add check that CA cert includes key usage extension