Instead of using a single certificate with custom domains as Alternative Name, switch to using different TLS certificates per domain group, grouped by domain name pattern (based on year prefix).
This way, we won’t hit the limit of maximum Alternative Names on a single certificate, and it’s quicker to renew individual certificates.

Submitted by Elmer van Chastelet on 10 September 2021 at 13:21