Add constraints on arbitary attributes for certificate-based authentication

[bluecmd]

Feature Request:
Like in #2595, but for all subject attributes.

In my case I have a need to assign policies based on the O= and OU= attribute.
Restricting matching on a base, like saying the certificate must be based at O=Company,C=Sweden is fine as well (which would match CN=test.se,O=Company,C=Sweden but not CN=test.no,O=Company,C=Norway)

Let me know if you need more details.

[jefferai]

Dup of #4562

[bluecmd]

No. This is for auth. The other one is for generation.

[vishalnayak]

Issues that are not reproducible and/or not had any interaction for a long time are stale issues. Sometimes even the valid issues remain stale lacking traction either by the maintainers or the community. In order to provide faster responses and better engagement with the community, we strive to keep the issue tracker clean and the issue count low. In this regard, our current policy is to close stale issues after 30 days. Closed issues will still be indexed and available for future viewers. If users feel that the issue is still relevant but is wrongly closed, we encourage reopening them.

Please refer to our contributing guidelines for details on issue lifecycle.