I try to sign certificate requests with SAN extension to have DNS alias names, but with no success. I see that there are subjectAltNameExt in the profile but my

policyset.serverCertSet.9.default.params.subjAltExtPattern_0=$request.req_san_pattern_0$

is always null, although I have

input.i3.name=subjectAltNameExtInputImpl

for the inputs.
What I am doing wrong?