Fix DN order, allow multiple standalone runs, standalone generate client certificates,

NiFi authorization framework currently expects CN to come before OU, the tool should reflect that by default.

Standalone tool would be much more useful if you could keep running and refining in the same directory with the same CA certificate.

Standalone tool would be much more useful if it could also generate client certificates.