insert http-header value from SSL Certificate extentions

have you tried basic debugging yourself? if not this is how i much approach this

start with logging the X509::extensions to see if the email is available there

then check if you filter it correctly to ext_attribute, i believe that line is missing a ]

then why do you put it in a you got your email, which you can insert in your header without making it extra complex.