In openssl 3.2.x if extensions are given, the version will be set to 2.

postmodern · postmodern · commit 12b9b9d2dd97 · 2024-07-21T14:56:58.000-07:00
* X509 extensions support was added in V3 (aka `cert.version = 2`), so if
  extensions are given, then the X509 version is automatically upgraded
  to `2`.
diff --git a/spec/crypto/cert_spec.rb b/spec/crypto/cert_spec.rb
@@ -383,9 +383,6 @@
             state:               state,
             country:             country
           }
-          # BUG: specifying extensions causes cert.version to be upgraded to 2
-          # on ruby >= 3.2 and openssl 3.2.1.
-          # extensions: extensions
         )
       end
 

Original file line number	Diff line number	Diff line change
`@@ -383,9 +383,6 @@`
`383`	`383`	`state: state,`
`384`	`384`	`country: country`
`385`	`385`	`}`
`386`		`- # BUG: specifying extensions causes cert.version to be upgraded to 2`
`387`		`- # on ruby >= 3.2 and openssl 3.2.1.`
`388`		`- # extensions: extensions`
`389`	`386`	`)`
`390`	`387`	`end`
`391`	`388`