[Freeipa-users] Add SAN to cert (without adding it to the CSR)