Currently, no DNS checks on whether the host(s) in the certificate actually exist at the DNS level. https://github.com/endail/aus-ntps/blob/main/src/NtpX509DiscoveryService.py