Make all except CN and EMAIL opt. in S/MIME CSR

Having these as required was probably a customer request ages
ago. Usually the CA fills those fields.

This has the advantage that we can fill it from other stuff
like the new Name and EMail aquiring code using Active Directory
or the EMAIL env var.

• GnuPG-Bug-Id: T5181