Check for unique SAN in cert, dial down to 1% chance every 12 hours

[DiegoRBaquero]

Check more often, with less chance and that the specific SAN (if initial) doesn't exist