pfSense

with #7383 PFSense got the ability to sign arbitrary CSRs.

With browsers moving to only use `subjectAlternateName` when validating certificates, the new form should probably also contain the option to specify alternate names or, alternatively, read them from the CSR and suggest them by default.

Right now, a pasted CSR gets signed, but there's no way to specify SANs nor are the SANs from the CSR being copied.