cleaned up openssl configuration to facilitate issuance or different
profiles for selfsigned root and issued certificates
configuration update