MS cert template: add template extension to CSR
Add the MS V2 certificate template extension to the CSR, when the
attribute is set. Failure to parse the value (as stored) merely
causes the extension to be skipped.
Part of: https://pagure.io/certmonger/issue/78