> No. This isn't a thing that happened. Oh, I beg to differ. I saw many examples of this for certs my company had issued from a digicert private CA. Maybe th

> No. This isn't a thing that happened. Oh, I beg to differ. I saw many examples of this for certs my company had issued from a digicert private CA. Maybe this didn’t happen with certs from public web pki but I can assure you it did for private certs, for which browser support is still an important issue. But I’ll admit this is moving the goalposts on you and your point is made. I still would prefer the more hard-ass approach but the reality is that consumer products are going to prefer ease of use over correctness, so what are you going to do.