Those 127 SAN's have wildcards which are not the left most label, which as i interpret it would be a violation of rule 1.