Problem generating cert with large number of SANs (60+)

Ah, good to know.

Yep, if sites-e.larc.nasa.gov has a CAA, that stops checking parent domain names.

So the number of checks is reduced, that reduces the number of problems :wink:

Congrats @JuergenAuer on a very clever solution to a tricky problem!