only add DER.TRUE when encoding X.509 extension when non-critical (MRI behaviour)

Author: kares

src/main/java/org/jruby/ext/openssl/X509Extensions.java

@@ -838,8 +838,8 @@ public IRubyObject to_der() {
             final ASN1EncodableVector vec = new ASN1EncodableVector();
             try {
                 vec.add( getRealOid() );
-                if ( critical != null ) { // NOTE: likely a hack Boolean.FALSE should also get skipped
-                    vec.add(critical.booleanValue() ? DERBoolean.TRUE : DERBoolean.FALSE);
+                if ( critical != null && critical.booleanValue() ) {
+                    vec.add( DERBoolean.TRUE );
                 }
                 vec.add( new DEROctetString(getRealValueBytes()) );
                 return RubyString.newString(getRuntime(), new DLSequence(vec).getEncoded(ASN1Encoding.DER));