typed this up because I couldn’t actually find very much information on the new(ish) -addext feature of openss req
Thank you. It only took them nearly 20 years but we can finally do SAN without ridiculous hoop jumping.
Very useful, thanks. I had been using a seperate OpenSSL.cnf to handle the SAN before.
you’re welcome! glad to be helpful.