[Freeipa-users] SOLVED: Add SAN to cert (without adding it to the CSR)