fixed `leap cert csr` to add correct "Requested Extensions" attribute on the CSR.