[Issue 10478] slapo-autoca allows arbitrary SAN injection via unescaped ipHostNumber passed to OpenSSL