remove subjectAltName stuff from CA config, ensure extensions present in CSRs are copied