bugfixes:
- "openssl_certificate - make sure that extensions are actually present when their values should be checked."