Support for generating client/server specific certs

[mbainter]

OpenVPN wants to verify certificates in specific roles as client -> server. It would be helpful to have support for generating certificates with the extensions for that (like extendedKeyUsage=client).

See: https://github.com/OpenVPN/easy-rsa/tree/master/easyrsa3/x509-types