Oh, I completely agree—I maintain a SAN and it's a royal pain in the ass. But there are options, and a SAN has lower risk if your key is leaked (only the enume

Oh, I completely agree—I maintain a SAN and it's a royal pain in the ass. But there are options, and a SAN has lower risk if your key is leaked (only the enumerated domains will validate).