Add -new and -subj options to x509 app for direct cert generation