def _add_sans(subject, sans): subject.add_extension( [x509.DNSName(dns_name) for dns_name in dns_names], critical=False)