- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
diff --git a/programs/ssl/test-ca/index b/programs/ssl/test-ca/index
index 67ac065..a334c8e 100644
--- a/programs/ssl/test-ca/index
+++ b/programs/ssl/test-ca/index
@@ -14,3 +14,4 @@
V 220207160636Z 0E unknown /C=NL/O=PolarSSL/CN=www.example.com
V 220207160636Z 0F unknown /C=NL/O=PolarSSL/CN=www.example.com
V 220211172555Z 10 unknown /C=NL/O=PolarSSL/CN=www.example.com
+V 220511132341Z 11 unknown /C=NL/O=PolarSSL/CN=www.example.com