bug#28458: 26.0.50; Does Emacs support SAN (subject alternate names)?

[Robert Pluim]

Lars Ingebrigtsen <larsi@gnus.org> writes:

> I've been seeing some warnings about invalid TLS certificates lately
> that seem kinda unlikely.  I mean, it's from major sites that shouldn't
> have broken TLS certificates.  And the error is always that the host
> name doesn't match the name of the certificate.
>
> Which made me wonder: Does gnutls.c support SAN (subject alternate
> names), which is a way to list oodles of host names in a single
> certificate?  I can't find any mention of this in the code...
>

Good question. Example sites/certificates? (I have a vague memory of
there being more than one way to do SAN, perhaps we're looking at the
wrong field)

Regards

Robert