feature/23200 Copy whitelisted extensions from CSRs to certs

This pull request adds support for copying selected certificate extensions from a CSR to the certificate. Extensions with OIDs under ppRegCertExt or ppPrivCertExt will be passed through automatically.