Make sure the certificate has a extendedKeyUsage section with codeSigning per the iPXE requirements. Fixes #195