Update external certs docs to use comma as SANs delimiter