No SAN for privatelink address

[rcomanne]

Hi, in setting up Azure Cache for Redis, I've noticed that the certificate used by the Redis instance is returning a certificate which has a wildcard for the default *.redis.cache.windows.net domain and an extra one for *.geo.redis.cache.windows.net, however there is not one for the 'default' private link DNS zone *.privatelink.redis.cache.windows.net
Is this intended, if so, what's the reasoning behind this?