allow create_object to make certs without RFC 3779 extensions
allow create_object to make certs without RFC 3779 extensions

IPv4, IPv6, and AS resources previously required by create_object are
now optional.  Moreover, any resources in the template cert are
ignored.  Note that this potentially violates RFC 6487 section 4.8.10
but is useful for generating negative test cases.

rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir,rhansen/rpstir