(PUP-1387) fixes wrong hash in subjectKeyIdentifier

this fixes the regression that appeared when the arguments to
ExtensionFactory where accidentally swapped.
Also added a test case to check if the subjectKeyIdentifier is present
and changed the unit test to use Puppet::SSL::CertificateAuthority instead
of generating a temporary cert using OpenSSL::X509::*