add generic ITS AID (39) to all suitable certs add IS IDs to root and AA certs
fix a generation bug in CERT_TS_18_02_BO_AT