Does LE honor the order of domains given in an order’s CSR, or does it apply its own sort order? (Or is this aspect of its policy undefined?)
The current behavior appears to be a server-defined sort (e.g., I’m seeing
*.example.com sorted before
example.com, regardless of the order of the CSR’s SAN), but I’m curious if this is a reliable behavior.