#832036 ssl-cert: no easy way to have make-ssl-cert use a subjectAltName