sign-req command option preserve should be default behavior

[TinCanTech]

I cannot think of any reason that someone would want random DN fields.

I would use global option --preservedn but it would be unnecessary.

Enable SSL option -preserveDN for Easy-RSA sign-req() by default.

[TinCanTech]

FTR: In order to build a CSR with disordered DN fields with easyrsa, the openssl-easyrsa.cnf DN fields order must be changed. This is then unsupported.

Signing the request will normally correct the order to that of the signing PKI.

Thus, having the option to preserve the request DN ordering is the right approach.