Now that the RA has validation profiles, we can use that to control maxNames on a per-profile basis, and reduce the number of names allowed on a tlsserver-profile cert.