Merge verification of the keyUsage extension in X.509 certificates