#undef X509_EXTENSIONS to avoid conflict with CryptoAPI.