Match up TLS cert generation to genca.sh
Match up TLS cert generation to genca.sh

* Remove critical constraints
* Add nonRepudiation and digitalSignature key usages
* Include only the keyid Authority Identifier

bsc#1046708

ereslibre/caasp-container-manifests