expand tests for authoritykeyidentifier
netmask tests (+ fixes to actually make generalname handle netmask)
add tests for new extensions in Cert