Auth extension and CA flag bugfix.

- We weresetting 'CA' to 'FALSE' for every certificate, even the CA ones.
- We can now add the extendedKeyUsage extension to both CSRs and certs to allow them to formally accepted for authentication.