- Correctly handle MS certificate's key usage bits

diff --git a/library/x509parse.c b/library/x509parse.c
index 1ed3fdc..3513f1b 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -765,7 +765,7 @@
     if( ( ret = asn1_get_bitstring( p, end, &bs ) ) != 0 )
         return( POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS + ret );
 
-    if( bs.len > 1 )
+    if( bs.len < 1 )
         return( POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS +
                 POLARSSL_ERR_ASN1_INVALID_LENGTH );