pub fn leaf_dns_sans(leaf_der: &[u8]) -> Result<Vec<String>, AcmeError>
DNS SANs of the leaf, lowercased.