Fix issues with extensions in GSI proxies

Make sure that the subject alternate names extension is not copied to proxies (RFC 3820).
Also, fixes a related issue in a proxy generated from another proxy (delegation) and with
the notAfter time setting (correctly take into account summer time).