ipatests: fix TestSubCAkeyReplication
    
    The test is using the output of openssl to compare the SubCA issuer name
    with the expected value.
    Depending on the version of openssl, the issuer can be displayed
    differently (with/without space around the = character). On RHEL 7.x,
    there is no space by default while on Fedora the space is used.
    Calling openssl with -nameopt space_eq forces a consistent output, always
    adding space around =.
    
    Reviewed-By: Sudhir Menon <sumenon@redhat.com>
    Reviewed-By: Sudhir Menon <sumenon@redhat.com>