the main library, but only with printing at present. To see this try:
openssl x509 -in cert.pem -text
on a certificate with some extensions in it.

This is the result of a "make errors" with the new error building functionality
in place.