Add $trusted[extensions] to certificate extensions docs