Browsers check host names only against subjectAltName; the subject common name is ignored for this purpose. A certificate without a SAN entry for the host fails validation even if its CN matches (RFC 5280 §4.2.1.6).
2.5.29.17
id-ce-subjectAltName
subjectAltName lists the DNS names, IP addresses and e-mail addresses a certificate is valid for.
2.5.29.17 identifies id-ce-subjectAltName, a certificate or CRL extension. DER: 0603551d11.
- Dotted notation
2.5.29.17- DER encoding
0603551d11- Category
- a certificate or CRL extension
- Also known as
subjectAltName, SAN- OpenSSL short name
subjectAltName- OpenSSL long name
X509v3 Subject Alternative Name- Parent
- 2.5.29 id-ce
- Listed by
- the ecdsa.com catalog