`X509_REQ_get_extensions`.  Do you know if `sk_X509_EXTENSION_num` is NULL-safe?