Added Java RSA keysize option

Defaults to 2048 Bit
added FQDN wildcard variable

for the initial enrollment subject and SAN
you can now use __SYS_FQDN__ to let CertNanny
replace the FQDN during runtime.