AKID and SKID doesn't have to match when building certificate chain

Ported from openJdk8u121

changeset:   11494:ffd65eb4d2be
parent:      11476:5b8ec82dc4d3
user:        mullan
date:        Mon Mar 21 14:13:57 2016 +0000
summary:     8072463: Remove requirement that AKID and SKID have to match when building certificate chain

Test: CtsLibcoreTestCases
Bug: 31028374
Change-Id: Ib635ca731da8761abce83c002cc72c59b141d5df