Make 'openssl req -x509' more equivalent to 'openssl req -new'