Include the domain in the SAN of the CSR

Allows autocert to work with Pebble (see letsencrypt/pebble#304).

acme/autocert/autocert.go

@@ -645,7 +645,7 @@ func (m *Manager) certState(ck certKey) (*certState, error) {
 // authorizedCert starts the domain ownership verification process and requests a new cert upon success.
 // The key argument is the certificate private key.
 func (m *Manager) authorizedCert(ctx context.Context, key crypto.Signer, ck certKey) (der [][]byte, leaf *x509.Certificate, err error) {
-	csr, err := certRequest(key, ck.domain, m.ExtraExtensions)
+	csr, err := certRequest(key, ck.domain, m.ExtraExtensions, ck.domain)
 	if err != nil {
 		return nil, nil, err
 	}