Is there a write-up somewhere explaining why this was a technical hurdle compared to base domain certs? Very curious.