Domain Name Matching

Domain matching is used to verify if a certificate matches the domain, by comparing the certificate with the domain.

There are three modes for comparison:

Mode	Description	Comment
Basic	The certificate SAN/CN must match the Domain.
Lenient	At least one domain in the list must match.
Strict	All domain names in the list must match exactly.