Yes, the log is static. It only contains the subject name if the certificate. But there's little to fear from exposing internal domain names. DNS names are mor

Yes, the log is static. It only contains the subject name if the certificate. But there's little to fear from exposing internal domain names. DNS names are more or public knowledge - they are transmitted unencrypted, end up in plenty of caches etc. Attackers can probably brute force it or the PTR records anyway.