Merge pull request #373 from h2o/kazuho/openssl-cert-verify-usage

set correct role, confirm behavior using cert w. EKU=serverAuth only