Added explicit X509 Extended key usage flags for Client authentication use and for message signing (called email protection in x509)
Added Server Alternate Names and IP(v4 and v6) addresses for server certificates.
Updated gitignore to ignore certificates, private keys and DNSSEC-DANE records.
Added a Dual Authentication Handler.
It allows a site to offer both Eccentric Authenticated client certificates,
as well as passwords.