can we extract the certificate extension and CRL extension using openssl command