Allow adding and specifying EKUs

[cirosec-lsc]

The leaf certificates do not contain the Extended Key Usage Extension. It would make this great tool more flexible to differentiate between client and server certificates, for example.