(PE-4372) Added null checks for objects without extensions
(PE-4372) certificate signing includes an OID whitelist