util.openssl: Separate extension sections into one for self-signed certs and one...