Don't mutate extensions in `verifySCTsForCertificate`

[twiss]

To allow the function to be called multiple times (e.g. when verifying SCTs individually), it's necessary to leave the extensions array intact for the next call to verifySCTsForCertificate.