[Freeipa-users] certs: SAN without othername / NT Principal name