Merge pull request #2168 from reaperhulk/encode-ku

Support encoding KeyUsage into certificate signing requests