reverted changes in last commit (7dd24e81ed038ea5fcee9589f06c17fdc6bd17f4)
with message " extend the CertProfile so that one can specify different AKI for
selfsigned and not selfsigned certificate in the same certprofile"
add demo to enroll cross certificate
fix negative integer bug
better format of output
add support to configure whether CA can issue certificates whose notAfter
is after the CA's notAfter