V2.x.x additional attributes on EAP-TLS

This change adds the following additional attributes. We've found them useful.

**TLS-Client-Cert-SHA1-Fingerprint & TLS-Cert-SHA1-Fingerprint**

Respectively the sha1 fingerprint of the client and issuer certificates e.g. 66:c1:7d:cf:2f:b3:d7:2f:d2:63:39:f1:25:98:be:4f:0b:00:d6:db

**TLS-Client-Cert-Subject-Alt-Name-MS-UPN & TLS-Cert-Subject-Alt-Name-MS-UPN**

The Microsoft UserPrincipalName in each certificate, typically in user@domain.com format.