Create newline to ensure [SAN] section can be parsed

getssl

@@ -1156,7 +1156,7 @@ create_csr() { # create a csr using a given key (if it doesn't already exist)
  # create a temporary config file, for portability.
  tmp_conf=$(mktemp 2>/dev/null || mktemp -t getssl) || error_exit "mktemp failed"
  cat "$SSLCONF" > "$tmp_conf"
- printf "[SAN]\n%s" "$SANLIST" >> "$tmp_conf"
+ printf "\n[SAN]\n%s" "$SANLIST" >> "$tmp_conf"
  # add OCSP Must-Staple to the domain csr
  # if openssl version >= 1.1.0 one can also use "tlsfeature = status_request"
  if [[ "$OCSP_MUST_STAPLE" == "true" ]]; then