remove Cert#extensions, rename Cert#r509_extensions to Cert#extensions

this is a breaking API change.