Is it even a good idea to test the subject name when the Certificate Usage is DANE-EE? RFC 7671 says, in its section 5.1, to ignore all the checks such as expiration date and subject name.
- Bug#817894: hash-slinger: tlsa --verify sends a spurio... Stephane Bortzmeyer
- Bug#817894: What about RFC 7671? Stephane Bortzmeyer