added options to sign certificate with x509 extensions KeyUsage and ExtendedKeyUsage