narrow the AS range a bit
narrow the AS range a bit

hopefully this will fix the error "invalid or inconsistent certificate extension" on netbsd

rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir