PKIX: Fix CertPathValidator parsing of the ISIS-MTT dateOfCertGen extension (in the chain validity model), which was missing the unwrap of the extnValue OCTET STRING. A new ValidityModelTest covers the shell and chain validity models through the provider API.