CVE-2026-31430 X.509: Fix out-of-bounds access when parsing extensions

CVE-2026-32280 Unexpected work during chain building in crypto/x509

CVE-2026-32281 Inefficient policy validation in crypto/x509