CACreateCert: add support for --dns option