```release-note:bug
secret/pki: Use user-submitted ordering for SANs, fixing issues where automatic ordering causes parse failures in some browsers.
```
