Allow extensions to be added to certificate requests, update the sample