Add -clrext option to 'x509'