v3.0.3

• Added the ability to configure expected key usage in a spec file
  Previously a cert was considered invalid if it did not contain the KeyUsage for server authentication.
  You can now add key_usages: [“client auth”] to specify the certificate should be valid for client auth.
  Default behavior has been retained, if you do not specify key_usages it is assumed the cert should be valid for server authentication.
• Fixed a crash encountered when errors were encountered loading a spec.
• Better handling of authentication errors from cfssl.
  Previously we would retry requests unless the token was invalid. Now we do not retry on any authentication failures.
• Fixed bug with certmgr version not showing the actual version info
• Comment fixes (thanks @jbrampton)