Hacker News .hnnew | past | comments | ask | show | jobs | submitlogin

X509's subject alternative name extension has nothing to do with TLS' SNI extension. SNI does not have a mechanism for locally-defined name types akin to X509's OtherName.


SNI matches certificates by looking at the SAN list on a list of certificates and finding the best match.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: