CN (which I guess is what you mean by main domain) is deprecated and will disappear eventually.
The only clients that have trouble with SAN/CN order that I can think of are really old versions of Outlook. I’m not aware of any others.
2 Likes