add1_extension
res = add1_extension(pexts, NID_crl_reason, 0 /* non-critical */, val);
&& !add1_extension(&exts, NID_subject_alt_name, crit, default_sans))
&& !add1_extension(&exts, NID_subject_alt_name,
&& !add1_extension(&exts, NID_certificate_policies,