Certificate contains dns names for services that are not enabled
In the Certificate all DNS Entries are requests wether their needed or not.
For example when you disable MinIO with minio.enabled: false
the domains minio-console.<domain>
and minio-console.<domain>
are requestes as a DNS Name in the certificate.
DNS Names for Ingress Domains should only be added if the domain is activly used.