add new exceptions, change X509Extension proposal to use get_extension