Been going through a book I like - yet have struggled with - OpenSSL Cookbook by Ivan Ristic, published by FeistyDuck (see
https://www.feistyduck.com/books/bulletproof-ssl-and-tls/)
After yet another go around I think I may have finally figured out what is missing in the text, to have it work, really, as is expected, with x509 extensions.
Questions: feel free to ask - I might ask something back though!
Visit? : maybe in Prague next month (October 2019) for the European TechU. I'll be there as a speaker.