The helper script make_tls_cert.sh will create the required individual host names per pod that will be deployed, but it should also include the service name as well.
Additionally, it would be nice to have a verify command to list the hostnames, which is useful in debugging.