Disable commonName matching for certificates

net/data/ssl/scripts/generate-aia-certs.sh

 #!/bin/sh
 
 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This script generates a set of test (end-entity, intermediate, root)
 # certificates that can be used to test fetching of an intermediate via AIA.
 
 try() {
@@ skipping 62 matching lines @@
 CA_COMMON_NAME="aia-host.invalid" \
 CA_DIR=out \
 CA_NAME=aia-test-intermediate \
 try openssl req \
   -new \
   -key out/aia-test-cert.key \
   -out out/aia-test-cert.csr \
   -config aia-test.cnf
 
 CA_COMMON_NAME="AIA Test Intermediate CA" \
+  HOST_NAME="aia-host.invalid" \
   CA_DIR=out \
   CA_NAME=aia-test-intermediate \
   AIA_URL=http://aia-test.invalid \
   try openssl ca \
     -batch \
     -in out/aia-test-cert.csr \
     -out out/aia-test-cert.pem \
     -config aia-test.cnf \
     -extensions user_cert
 
 # Copy to the file names that are actually checked in.
 try cp out/aia-test-cert.pem ../certificates/aia-cert.pem
 try openssl x509 \
   -outform der \
   -in out/aia-test-intermediate.pem \
   -out ../certificates/aia-intermediate.der
 try cp out/aia-test-root.pem ../certificates/aia-root.pem