Disable commonName matching for certificates

net/data/ssl/certificates/reject_intranet_hosts.pem

Index: net/data/ssl/certificates/reject_intranet_hosts.pem
diff --git a/net/data/ssl/certificates/reject_intranet_hosts.pem b/net/data/ssl/certificates/reject_intranet_hosts.pem
index 82c767ca1f4c7ff5046d84b11a8a5265b3c0321d..e2d43b758fc883d6efe696fe5f3f40eceb344907 100644
--- a/net/data/ssl/certificates/reject_intranet_hosts.pem
+++ b/net/data/ssl/certificates/reject_intranet_hosts.pem
@@ -1,66 +1,69 @@
 Certificate:
     Data:
-        Version: 1 (0x0)
-        Serial Number: 15826771597900763765 (0xdba3fcea1a1dd275)
+        Version: 3 (0x2)
+        Serial Number: 11446371030079207460 (0x9ed9adce6f317824)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=webmail
         Validity
-            Not Before: Feb 28 19:43:04 2017 GMT
-            Not After : Feb 28 19:43:04 2020 GMT
+            Not Before: Mar  1 03:41:00 2017 GMT
+            Not After : Feb 29 03:41:00 2020 GMT
         Subject: CN=webmail
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c0:ee:1b:56:47:23:82:d2:15:ca:ca:64:05:e3:
-                    ed:ab:0e:d5:b9:0c:ab:53:14:6b:8d:d4:d3:a9:79:
-                    64:b5:f2:16:34:a1:93:48:e0:a5:e7:ac:a9:80:b8:
-                    dc:f2:c1:25:b4:1b:7a:02:01:0d:58:a1:c7:5b:6a:
-                    e5:2a:92:b0:94:c0:62:53:15:fe:6b:f6:7f:73:c8:
-                    b0:2c:66:c2:69:3f:77:02:e6:6e:40:0b:2c:a1:bf:
-                    43:8c:65:cf:c5:8a:b8:38:e1:9b:f2:d4:3b:b2:58:
-                    ca:a2:a5:0d:e9:fe:02:06:13:a9:7a:4d:88:37:fb:
-                    d7:31:50:08:05:03:30:d7:eb:f8:18:50:e9:9a:d6:
-                    6d:97:6d:91:a0:16:51:86:ac:46:63:53:75:21:c3:
-                    64:b5:27:43:14:57:17:10:e1:69:92:9f:ec:83:d2:
-                    67:78:fb:1c:b4:41:34:5d:32:b6:43:f6:9c:40:8e:
-                    a5:00:e2:cc:9b:13:a8:76:30:73:59:18:ff:08:40:
-                    03:24:59:d2:1c:a8:e8:57:a6:63:cc:e1:9a:e5:22:
-                    36:b5:ff:30:a2:b9:b1:93:65:c4:13:f9:ee:98:1e:
-                    8a:3c:91:d6:6b:62:98:16:73:b5:63:8f:f4:ac:f5:
-                    b9:e0:4f:5a:c7:f3:68:2b:04:67:b2:2e:ad:40:6b:
-                    a5:c9
+                    00:be:3d:d3:32:19:9f:d4:0f:b8:fa:83:0d:4d:77:
+                    6a:00:b6:cc:16:45:70:45:a1:1b:29:2c:6b:43:82:
+                    29:9c:f9:9c:b5:37:e5:a8:3b:f8:b9:fa:96:df:7b:
+                    a9:a0:fc:a4:cf:19:49:e7:c3:2b:94:a0:02:d8:5c:
+                    17:f3:84:ec:8b:0c:1b:d6:cd:30:36:d1:41:35:46:
+                    c7:a9:62:73:2a:84:de:cf:59:51:8e:92:38:4a:af:
+                    f6:e0:7e:db:9e:19:7a:d0:8c:79:c8:4d:53:8c:6d:
+                    41:4c:04:b9:08:84:c8:81:eb:6b:65:ac:65:8d:d1:
+                    26:a9:31:3a:61:34:2e:70:91:da:c7:98:ff:73:de:
+                    95:7a:bf:90:6f:a5:94:d7:6f:e0:10:4b:79:ee:44:
+                    4b:a3:46:d1:9b:7d:14:77:7f:9d:74:6f:6c:a4:a7:
+                    8f:53:be:1f:fd:28:e8:c1:a7:03:11:57:fc:cb:08:
+                    d0:96:cd:41:66:cb:4f:e2:9e:22:d3:96:4b:97:f8:
+                    a9:a2:34:58:f3:95:50:59:fd:7f:c9:11:d4:1c:f1:
+                    af:b8:fd:35:55:86:5e:13:bf:e7:60:8f:90:76:50:
+                    c5:ef:06:95:88:b7:99:2e:1d:07:8f:4b:57:9f:5f:
+                    8d:f3:10:76:75:f0:72:0d:9e:48:0b:4e:d9:34:d0:
+                    49:05
                 Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:webmail
     Signature Algorithm: sha256WithRSAEncryption
-         3d:88:8e:44:4c:08:ed:d6:78:bd:2e:2a:d2:1e:40:31:12:0c:
-         ab:c4:7d:e8:d6:4d:a4:85:04:26:3c:af:a8:00:b1:ff:d0:89:
-         e8:85:21:c8:7a:5b:5e:ee:b4:0b:30:b9:7f:5c:bf:9a:91:0e:
-         1a:3b:5f:8d:93:86:d4:c2:d4:95:aa:c8:3f:b3:9f:4a:e9:87:
-         3d:17:0f:a8:a2:31:3a:b6:55:b5:ce:24:52:34:71:11:c8:0e:
-         50:b1:50:2e:9f:f8:63:ed:d8:a9:3b:00:15:fc:8a:57:ee:9f:
-         2a:ef:5b:4a:4c:e2:55:38:4b:2a:d3:b0:c5:08:85:96:c2:e0:
-         39:d8:04:17:35:b6:a9:56:55:a4:26:26:82:49:43:9b:8a:dd:
-         0f:c2:c0:8b:cb:4c:91:d9:85:5e:8b:88:95:d8:25:b6:9c:2b:
-         9d:1b:37:4c:59:c5:65:52:60:c4:5f:af:61:0b:1b:b9:14:22:
-         eb:a9:4d:cf:07:3c:89:ae:74:6d:95:e7:eb:02:65:f9:f3:ee:
-         ba:2d:10:6e:7d:22:f6:8a:1d:ce:fc:e3:7a:75:49:ea:37:d1:
-         ce:30:a3:4f:9b:17:9e:71:e4:e0:2e:32:18:0e:76:29:33:31:
-         a0:22:c1:ed:0b:c4:0d:b6:66:37:48:98:98:ca:85:17:24:3c:
-         db:fb:ef:0f
+         10:c1:6c:f1:d6:5c:a7:94:c6:dd:9d:e4:2c:9b:1a:1a:59:84:
+         35:32:b3:7f:57:d6:4c:01:fa:ed:78:44:ec:2c:cf:2c:72:31:
+         a8:95:c9:50:0d:a5:fe:4c:68:ce:21:b5:bc:4c:a0:b2:84:39:
+         33:24:f8:92:05:9f:ea:c4:0e:31:22:85:27:e4:2a:8a:66:b3:
+         05:96:60:97:0c:2c:86:69:76:ef:ac:15:4f:36:ac:5a:bd:11:
+         69:30:c3:a8:7e:f4:23:ca:7e:3d:83:0f:8b:35:bd:56:d0:5f:
+         fc:fa:98:9e:45:54:04:d3:0a:43:3d:b7:01:ca:0b:4b:5c:61:
+         34:fe:af:f1:8b:c0:bc:0a:b5:dd:52:e6:c2:81:53:c9:ce:fc:
+         39:f4:1a:45:a6:f6:9a:06:eb:57:d9:bb:5e:94:43:98:7f:96:
+         33:1d:5f:9b:c5:73:68:86:96:8f:65:8f:be:b7:f2:c5:8f:f0:
+         0e:7f:63:67:9d:58:1d:d9:cb:fc:78:a0:74:e7:06:94:12:80:
+         03:ab:0a:32:8c:1e:5e:ba:28:a7:eb:ed:3b:55:80:54:38:5b:
+         85:d8:e8:dd:de:51:11:42:7a:20:ef:b7:9f:25:d3:5a:4b:e2:
+         e3:84:36:94:e3:69:aa:c7:bf:22:14:0e:da:a8:da:13:89:c3:
+         6e:7e:8c:32
 -----BEGIN CERTIFICATE-----
-MIICoDCCAYgCCQDbo/zqGh3SdTANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAd3
-ZWJtYWlsMB4XDTE3MDIyODE5NDMwNFoXDTIwMDIyODE5NDMwNFowEjEQMA4GA1UE
-AwwHd2VibWFpbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDuG1ZH
-I4LSFcrKZAXj7asO1bkMq1MUa43U06l5ZLXyFjShk0jgpeesqYC43PLBJbQbegIB
-DVihx1tq5SqSsJTAYlMV/mv2f3PIsCxmwmk/dwLmbkALLKG/Q4xlz8WKuDjhm/LU
-O7JYyqKlDen+AgYTqXpNiDf71zFQCAUDMNfr+BhQ6ZrWbZdtkaAWUYasRmNTdSHD
-ZLUnQxRXFxDhaZKf7IPSZ3j7HLRBNF0ytkP2nECOpQDizJsTqHYwc1kY/whAAyRZ
-0hyo6FemY8zhmuUiNrX/MKK5sZNlxBP57pgeijyR1mtimBZztWOP9Kz1ueBPWsfz
-aCsEZ7IurUBrpckCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAPYiOREwI7dZ4vS4q
-0h5AMRIMq8R96NZNpIUEJjyvqACx/9CJ6IUhyHpbXu60CzC5f1y/mpEOGjtfjZOG
-1MLUlarIP7OfSumHPRcPqKIxOrZVtc4kUjRxEcgOULFQLp/4Y+3YqTsAFfyKV+6f
-Ku9bSkziVThLKtOwxQiFlsLgOdgEFzW2qVZVpCYmgklDm4rdD8LAi8tMkdmFXouI
-ldgltpwrnRs3TFnFZVJgxF+vYQsbuRQi66lNzwc8ia50bZXn6wJl+fPuui0Qbn0i
-9oodzvzjenVJ6jfRzjCjT5sXnnHk4C4yGA52KTMxoCLB7QvEDbZmN0iYmMqFFyQ8
-2/vvDw==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 -----END CERTIFICATE-----