Add cnf_tpl param to openssl::certificate::x509.

It may be useful to specify an other template for ".cnf" file
generated in openssl::certificate::x509.