Add new add_extension() function which maps to cryptAddCertExtension().

Also, allow signing unrecognized attributes.

These changes allow getting a Let's Encrypt certificate covering multiple
domain names.