A few more ASN.1 bugs

[Dean Povey <povey@xxxxxxxxxxxxxxx>]

Oops, I forgot to check.  In the body of the text on the CertificatePolicies
extension, the definition of id-qt is syntactically incorrect should be:

id-qt OBJECT IDENTIFIER ::= { id-pkix 2 }

This DOES appear in the appendix :-) 

-- 
+----------------------------------------+-------------------------------+
| Dean Povey,                            |  Email: povey@dstc.edu.au     |
| Research Scientist, Security Unit,     |  Phone: +61 7 3864 2799       | 
| CRC for Distributed Systems Technology |  Fax:   +61 7 3864 1282       |
+----------------------------------------+-------------------------------+