update openssl.cnf to set key usage