[PATCH 2/5] build: Generate test certs with no AKID / SKID extensions