CSR JSON supports specifying custom extensions, but selfsign ignores them

When building the certificate for a self-signed cert from a CSR json file, the Extensions field in the CSR is ignored. I'll open a PR with a fix (I used it locally and got a self-signed cert w/ my needed extension).