Merge pull request #2543 from reaperhulk/crl-extensions

support parsing CRL extensions in the OpenSSL backend