@dashie Yeah by "private" I mean the ones I don't want them linked to "public" domains and then allowing to simply look the SAN entry for one "public" domain to find the "private" ones