Fix how SAN is registered with the key.  In prior versions, we were having one SAN entry per domain.  However, apparently this is not allowed; instead we now have a single SAN extension entry with the full list.
Fix how SAN is registered with the key.  In prior versions, we were having
one SAN entry per domain.  However, apparently this is not allowed; instead
we now have a single SAN extension entry with the full list.

kristapsdz/letskencrypt