+ # TODO, i expanded the above cert manually to mx.iankelling.org, this should be captured
+ # in the automation here. We use mail.iankelling.org as our ehlo name when sending mail
+ # but our mx record is mx.iankelling.org. Initially I was just using mail.iankelling.org,
+ # but the problem is I want multiple ips to be able to identify as mail.iankelling.org,
+ # but a subset to be mx.iankelling.org. Afaik, there is no problem with having
+ # our mail cert be for mail.iankelling.org, and have people connect to mx.ian...,
+ # but it doesn't make logical sense to do this.