cosmetics
bugfix #3347: Certificate Authority SAN names not working in 2.1

subjectAltName can be set _only_ via configuration file - created three extra sections in openssl.cnf to use in case of existing of subjectAltName.

Unfortunately it is not possible to assign empty value to subjectAltName in openssl.cnf
Merge branch 'hotfix/3347-Certificate_Authority_SAN_names_not_working' into RELENG_2_1