Follow these best practices to help users select the correct logging option for their needs.
Default users to full domain name logging. Full domain name logging is the best choice for users with public domains. Making full domain name logging the default option reduces the chance of accidentally selecting only root domain name logging.
Make it easy to select the right choice. If most of your users request certificates for public websites, consider placing the only root domain name logging option in an advanced or edit view. The majority can move on quickly, while those getting certificates for private or internal websites can find the only root domain name logging option with an additional click.
Describe the benefits and uses for each option. Full domain name logging is the best choice for public domains. Full logging provides the full monitoring benefit of Certificate Transparency and the best browsing experience. Only root domain name logging is only appropriate for internal or private domains.