Comment # 7 on bug 1194187 from Mark Post

(In reply to Marcus R���ckert from comment #6)
> cp /etc/ssl/openssl.cnf /tmp/dehydrated-DwFNuo
> 
> 
> Add something like
> 
> ```
> [SAN]
> subjectAltName=DNS:host1, DNS:host2
> ```

Thanks, Marcus. Now I have to ask you to create something I can use for
/etc/dehydrated/certs/keyname_rsa/privkey-1640907684.pem to see what's going
on. Obviously I don't want you to send me a "real" private key, but something
that gets created the same way would be really nice.