Send extension information with the `certificate_status` response

In order to give users more information about the CSRs they are signing, the certificate_status API should return the extensions on the CSRs (and certs for good measure) along with other info, similar to what we do with subject alt names.

Questions: do we want to report only authorization extensions since those are likely to most influence the decision to sign?