Merge pull request #1806 from reaperhulk/eku-oids

support the EKU OIDs specified in RFC 5280 section 4.2.1.12