certtool: allow specifying arbitrary cert extensions in hex format
Currently an extension needs to be supported by gnutls (i.e., provide high level APIs) in order for certtool to be able to generate such certificates. It is desirable for future extensibility to allow specifying arbitrary extensions to be included in a certificate using raw DER contents.