x509 Verification: ExtensionPolicy refactor.

[deivse]

Another quick preliminary PR that just refactors some existing code to make implementation of user-provided extension policies more straightforward. (A good change even on it's own in my opinion.)