This should be on top since the title can be confusing. I thought someone found a vulnerability but it's indeed just a script to generate a certificate without

This should be on top since the title can be confusing. I thought someone found a vulnerability but it's indeed just a script to generate a certificate without having to care which common name or alternative names you give it.