[POLICY] Remove invalid SAN entries in AAF certs