certificate without key usage extension are automatically assumed to be
allowed to cert sign and crl sign.

fix #32.
bump version