SERVFAIL looking up CAA: How to detect AHEAD of time?

[bytecamp]

@lancedolan

The reason this is crucial is that every attempt is a SAN containing 100 domains, so if one fails, they all fail.

Why do you aggregate the domains at all? Are these subdomains of a given domain or distinct domains?