Clarify documentation around certificate issuance (#14236)
Clarify documentation around certificate issuance (#14236)

We note that:

 - allow_bare_domains, allow_glob_domains, and allow_subdomains are all
   independent,
 - enforce_hostnames and allow_wildcard_certificates take precedence over
   allow_any_name,
 - We limit to RFC 6125 wildcards.
 - Clarify that both allow_bare_domains and allow_glob_domains will permit
   wildcard issuance in certain scenarios.

Co-authored-by: mickael-hc <e9e627f44640a91037d21c06ef03c09aff5ddccf@users.noreply.github.com>
Co-authored-by: Kit Haines <cd2f95d76981053691b5abadcf2739b71ce6afaf@hashicorp.com>
Signed-off-by: Alexander Scheel <bfa222ba5bf8b529a89ed3140dfb6b6aaf42dd20@hashicorp.com>

Co-authored-by: mickael-hc <e9e627f44640a91037d21c06ef03c09aff5ddccf@users.noreply.github.com>
Co-authored-by: Kit Haines <cd2f95d76981053691b5abadcf2739b71ce6afaf@hashicorp.com>
hashicorp/vault,hashicorp/vault,rnaveiras/vault,rnaveiras/vault,hashicorp/vault,hashicorp/vault,rnaveiras/vault,rnaveiras/vault,rnaveiras/vault,hashicorp/vault,hashicorp/vault