remove some debugging
remove some debugging
codify that we don't require URI SAN in X.509 certs