Eliminate ERB

Hey RIP,

I doubt you'd want to merge this as-is, but I figured I'd submit the patch in case you wanted to know how I built on top of your work on this.

I was able to get away from the ERB file which I found a minor problem when generating requests because the default attributes of the CA weren't being pulled in.

With this patch the same attributes are used for both the CA and all generated requests, the only thing that differs is the Common Name of the generated certificates, which I was able to read from the ENV using ${ENV::CN}} similar to how you were using CERT before.

Anyway, certainly don't expect this to be merged or anything but thought you might be interested from an FYI point of view.

Cheers,
-Jeff