Add default value of 'cert_extension' in certmaster.conf