Merge pull request #2169 from reaperhulk/encode-eku

Support encoding ExtendedKeyUsage into certificate signing requests