why the extension folder is there? don't know. delete it
change the order of subject in certificate
not it is possible to corrected entries that cannot be initialized
ECC operations in BouncyCastle is much more expensive than in SunEC.
Try to use SunEC if possible