* Removed duplicate KEY_EMAIL var
* Commented out KEY_PCS11 vars 
* Commented out KEY_CN with explanation
* Set saner defaults
* reorganized vars, "required" fields first
 I commented these out because they're already set to dummy and you only need to change them if you're indeed going to use them. This makes it a little less confusing to newbies who may not be interested in PKCS11 and get confused when reading that they should now "leave any of these fields blank".
Signed-off-by: Eric F Crist <email@example.com>