Add new key fingerprint.
Clarify CMS_decrypt behaviour.
Extension checking fixes.

When looking for an extension we need to set the last found
position to -1 to properly search all extensions.

PR#3309.