7ecb5fe0b8
this adds subjectKeyIdentifier, authorityKeyIdentifier and basicConstraints (CA:TRUE) for selfsigned certificates to match with openssl req