In the add/edit/view end entity pages add a text area making it possible to supply (certificate) extension data. The textfield should only be visible and input accepted if a new check box in the end entity profile is checked: "Edit Custom Extension Data" similar to the check box for custom serialnumber.