subject_alt_names fails when are marked critical
subject_alt_names fails when are marked critical

RFC5282 stated that Subject Alternative Name must be marked critical when Subject is empty [1].
In this case openssl returns:
...
X509v3 extensions:
    X509v3 Subject Alternative Name: critical
        DNS:example.local, IP Address:192.0.2.1
...
and subject_alt_names can't get Subject Alternative Names.

[1] https://tools.ietf.org/html/rfc5280#section-4.2.1.6
minimum2scp/serverspec,mizzy/serverspec,serverspec/serverspec