On Tue, 15 Sep 2009, Peter Sylvester wrote:

>> Issuer: CN=www.anduras.de
>> X509v3 Subject Alternative Name:
>> email:yyy_at_anduras.de

> can you send your certificate, the above extract looks somewhat strange.

To me that looks like a CN that matches and a subjectAltName that doesn't
match, which then by the specs should be considered not a match. (Which is a
bug fix we made for 7.19.6 so the previous versions did wrong.)

Or am I wrong? That subjectAltName field with an email address looks funny to
me.

-- 
  / daniel.haxx.se