Refactor display_san() and display_dn() - Quote all exansions (#494)

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>

easyrsa3/easyrsa

@@ -1883,21 +1883,21 @@ display_san() {
 		print "$(echo "$EASYRSA_EXTRA_EXTS" | grep subjectAltName |
 			sed 's/^\s*subjectAltName\s*=\s*//')"
 	else
-		san=$(
+		san="$(
 		x509v3san="X509v3 Subject Alternative Name:"
 		"$EASYRSA_OPENSSL" "$format" -in "$path" -noout -text |
 			sed -n "/${x509v3san}/{n;s/ //g;s/IPAddress:/IP:/g;s/RegisteredID/RID/;p;}"
-			)
+			)"
 
 		[ -n "$san" ] && print "$san"
 	fi
-}
+} # => display_san()
 
 # display cert DN info on a req/X509, passed by full pathname
 display_dn() {
 	format="$1" path="$2"
 	print "$("$EASYRSA_OPENSSL" "$format" -in "$path" -noout -subject -nameopt multiline)"
-	san=$(display_san "$1" "$2")
+	san="$(display_san "$1" "$2")"
 	if [ -n "$san" ]; then
 		print ""
 		print "X509v3 Subject Alternative Name:"