Create cert with proper extensions