* Get rid of the CN checks and just use the subjectAlternativeName
  http://unmitigatedrisk.com/?p=381
  https://nameconstraints.bettertls.com/#!about
