add back signing of dns-alt-name certs
Merge pull request #44 from justinstoller/maint/master/one_more_time_with_feeling

add back signing of dns-alt-name certs