A very interesting discussion... On 17/09/17 22:49, Viktor Dukhovni wrote:
Can you explain a bit more detail here? (c) :) I though you can list SANs in the order you want in your certificate request and everything else will preserve it, and that applies to Let's Encrypt signed certificates too?There is no meaningful ordering of SANs.
(Also, in case of OP, why couldn't LE certificate with single SAN be obtained for each client?)
-- With Best Regards, Marat Khalili
