Add additional validations to SCT extension

[CBonnell]

This adds some validation checks to the SignedCertificateTimestampList extension.