Fix https://github.com/SURFconext/SURFConext-integration-tests/issues/11 by making the CA use keyUsage in it's cert.