3 ms·
X509's subject alternative name extension has nothing to do with TLS' SNI extension. SNI does not have a mechanism for locally-defined name types akin to X509'
by agwa 5y ago
X509's subject alternative name extension has nothing to do with TLS' SNI extension. SNI does not have a mechanism for locally-defined name types akin to X509's OtherName.
- X-Istence 5y agoSNI matches certificates by looking at the SAN list on a list of certificates and finding the best match.