issue certificates for public domains temporarily disable private domains
advertise .30 addresses instead of .40