option to replace extensions with new ones: mainly for creating cross-certificates