Domains for which this certificate is valid (only relevant for KeyType.Server, ignored for other key types).