fix assurance activity for add-on signature verification

[jeffblank]

The existing AA in FIA_X509_EXT.2.3 has more to do with connection setup.
http://common-criteria.rhcloud.com/webbrowser/output/webbrowser.html#FIA_X509_EXT.2.3