add SAN support base on switch-to-stdlib-csr branch

solve https://github.com/coreos/etcd-ca/issues/29 by adding SubjectAltName support.
-ip and -domain now accept comma seperated ip/domain list
generated cert is test against etcd 0.4.6 and work fine