test: encode unrecognized `tor_cert::CertExt`

This bumps the test coverage in the accompanying module to 99%, with an unreachable edge-case making up the remaining 1%. I've added a comment for the latter one.