SAN support is missing in [the keystore creation ](https://github.com/cloudera-labs/cloudera.cluster/blob/main/roles/security/tls_generate_csr/tasks/main.yml#L46)