more changes under the hood to support r509 0.9

updated the test config yaml
modified Signer#sign calls to separate subject and san_names from the
old data_hash model
update example config yaml for r509 0.9 compatibility