Generated cert does not include domain name of params.external_domain

[thomasmitchell]

If the kit generates a cert, it does not add params.external_domain as a SAN. Therefore, the kit fails to deploy if it is set to something other than the static IP of the shield box.

[jhunt]

is params.external_domain required? If not, then (IIRC) we run into problems putting it in the kit.yml certificates schema.

[thomasmitchell]

It is "required" in the sense that if the user doesn't give it, the kit provides it. But if the requirement is that it be provided by a user without the need for a spruce eval phase, then no.