How to remove extended properties from a PEM certificate