Feature/23201/csr extension requests

Provides a mechanism for specifying X509 certificate extension requests to be added to the csr for a host and copied into the hosts certificate by the Puppet certificate authority.