X509_EXTENSIONS not available in older OpenSSL versions
Deal with d2i_X509 constification