bugfix: checks for CRL, OCSP corrected; missing check in checkev() added; more +ext_* command for certificate extensions
+extensions implemented; --header, --no-header implemented