certs: fix csr generation (correct the key usage, remove msExtReq from attributes)