Build basic/authInfoAccess/crlDP extensions
Always request basicConstraints using template is-ca and ca-path-length
values, and request authorityInformationAccess and crlDistributionPoints
extensions if we have template OCSP responder or CRL distribution point
values.