Updated CMS_decrypt() to accept an option as the recipient's X509 certificate...

Updated CMS_decrypt() to accept an option as the recipient's X509 certificate to make the Rust implementation match the OpenSSL spec.

Included warning documentation on Bleichenbacher's attack on PKCS #1 v1.5 RSA padding