(#23200) allow certificate factory to add custom exts
(#23200) Add method for checking if one OID contains another
(#23200) Whitelist puppet extension requests