Disable commonName matching for certificates

net/data/ssl/certificates/aia-root.pem

Index: net/data/ssl/certificates/aia-root.pem
diff --git a/net/data/ssl/certificates/aia-root.pem b/net/data/ssl/certificates/aia-root.pem
index 866b3acb770ede3f32470211bb1b5efb7c5876b7..9c3c8461bb423e650b662e712d9f1b1dd59ac1e5 100644
--- a/net/data/ssl/certificates/aia-root.pem
+++ b/net/data/ssl/certificates/aia-root.pem
@@ -1,72 +1,18 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 16253959350627671104 (0xe191a9e987cd1c40)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: CN=AIA Test Root CA
-        Validity
-            Not Before: Aug 14 02:46:18 2014 GMT
-            Not After : Aug 11 02:46:18 2024 GMT
-        Subject: CN=AIA Test Root CA
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:c4:5c:27:f1:69:03:2f:85:94:57:91:3c:21:13:
-                    f9:61:de:be:1c:99:b4:fe:e5:8c:8a:6d:e1:8c:fa:
-                    26:2d:56:a5:7d:81:00:c2:16:e9:14:8e:70:7a:72:
-                    22:25:66:09:14:32:b1:04:ad:74:fb:64:77:dc:42:
-                    73:b0:7f:0f:e6:8d:04:78:27:ec:42:f6:65:e4:b7:
-                    d9:f6:93:ba:64:2e:a8:ed:f8:df:68:c4:57:c0:72:
-                    ac:ab:b4:b5:0d:31:ce:7f:57:59:eb:27:f0:8a:30:
-                    5c:1a:5f:f0:65:a3:02:dc:ff:f6:c0:0f:56:ac:b6:
-                    aa:05:cc:3a:46:5c:ec:5e:db:55:6b:44:8f:05:63:
-                    17:c2:5a:67:87:87:17:35:48:09:ae:cc:a5:a3:c7:
-                    7e:2c:c5:7a:aa:2e:0a:a2:fc:2f:90:5e:0e:de:d5:
-                    4a:bc:c1:91:11:aa:91:a8:63:9c:74:9d:0a:80:81:
-                    30:3c:a5:f3:f8:5e:7a:19:08:b5:1a:a8:99:84:6a:
-                    20:fa:fe:3e:99:77:d0:6e:3e:4c:e4:c2:f6:2c:ec:
-                    ce:53:bd:de:56:bf:d2:be:0f:7a:b8:86:14:69:eb:
-                    a2:7b:53:cd:91:21:fd:b6:89:1c:a3:0f:4a:6a:12:
-                    89:19:70:e6:c8:d7:6c:10:d4:a7:f2:b8:36:e8:24:
-                    5b:e7
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-    Signature Algorithm: sha1WithRSAEncryption
-         6d:5e:d4:ec:95:4c:ea:ae:0e:d6:02:23:f7:6c:09:62:dd:71:
-         8d:37:83:0d:d0:9f:0c:02:6f:52:63:4a:75:df:d4:02:fd:d9:
-         4c:2b:f3:91:99:b5:08:96:f9:72:fa:95:63:1a:45:20:8c:3b:
-         75:30:6b:cf:b7:b4:15:60:da:8d:74:82:32:b9:58:15:df:b0:
-         85:5d:cf:ac:2e:bb:35:2e:29:92:90:cf:8d:ae:e8:59:74:00:
-         2f:74:1d:12:43:f8:2b:50:66:5e:05:5b:35:e2:86:a1:f2:ea:
-         a7:2d:5f:e8:52:4a:e2:78:be:e3:26:c3:36:55:98:6e:f0:6c:
-         6f:e0:3a:d3:77:17:4f:a8:a8:c4:9a:2b:cb:c8:31:1b:15:1c:
-         a5:b2:2a:2d:5f:06:61:cd:44:90:89:f4:24:32:b8:d4:39:46:
-         f6:c4:6f:de:06:c9:06:b7:62:fc:c1:49:be:85:ed:9d:5f:39:
-         2c:db:b3:25:6b:12:a6:ff:ea:27:72:53:16:b8:0b:63:a3:d1:
-         b9:6c:b5:df:51:af:23:70:21:76:a9:ad:ca:36:b6:bd:3b:0a:
-         96:f7:19:4c:0a:06:89:ef:74:ca:54:b8:ba:52:f9:f8:a1:06:
-         c2:e4:0c:56:26:19:f9:82:50:58:91:2d:87:6b:a2:19:4b:96:
-         c4:b9:c9:0b
 -----BEGIN CERTIFICATE-----

[mattm, 2017/03/01 23:56:47]

lost the pretty printed cert contents somehow..

-MIIC3DCCAcSgAwIBAgIJAOGRqemHzRxAMA0GCSqGSIb3DQEBBQUAMBsxGTAXBgNV
-BAMMEEFJQSBUZXN0IFJvb3QgQ0EwHhcNMTQwODE0MDI0NjE4WhcNMjQwODExMDI0
-NjE4WjAbMRkwFwYDVQQDDBBBSUEgVGVzdCBSb290IENBMIIBIjANBgkqhkiG9w0B
-AQEFAAOCAQ8AMIIBCgKCAQEAxFwn8WkDL4WUV5E8IRP5Yd6+HJm0/uWMim3hjPom
-LValfYEAwhbpFI5wenIiJWYJFDKxBK10+2R33EJzsH8P5o0EeCfsQvZl5LfZ9pO6
-ZC6o7fjfaMRXwHKsq7S1DTHOf1dZ6yfwijBcGl/wZaMC3P/2wA9WrLaqBcw6Rlzs
-XttVa0SPBWMXwlpnh4cXNUgJrsylo8d+LMV6qi4KovwvkF4O3tVKvMGREaqRqGOc
-dJ0KgIEwPKXz+F56GQi1GqiZhGog+v4+mXfQbj5M5ML2LOzOU73eVr/Svg96uIYU
-aeuie1PNkSH9tokcow9KahKJGXDmyNdsENSn8rg26CRb5wIDAQABoyMwITAPBgNV
-HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEA
-bV7U7JVM6q4O1gIj92wJYt1xjTeDDdCfDAJvUmNKdd/UAv3ZTCvzkZm1CJb5cvqV
-YxpFIIw7dTBrz7e0FWDajXSCMrlYFd+whV3PrC67NS4pkpDPja7oWXQAL3QdEkP4
-K1BmXgVbNeKGofLqpy1f6FJK4ni+4ybDNlWYbvBsb+A603cXT6ioxJory8gxGxUc
-pbIqLV8GYc1EkIn0JDK41DlG9sRv3gbJBrdi/MFJvoXtnV85LNuzJWsSpv/qJ3JT
-FrgLY6PRuWy131GvI3Ahdqmtyja2vTsKlvcZTAoGie90ylS4ulL5+KEGwuQMViYZ
-+YJQWJEth2uiGUuWxLnJCw==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 -----END CERTIFICATE-----