added option for specifying extfile in certificate generation