protected override X509Extensions GetX509Extensions() { return c.Version == 3 ? c.TbsCertificate.Extensions : null; }