Domain Name Matching

Domain matching is used to verify if a certificate matches the domain, by comparing the certificate with the domain.

There are three modes for comparison:

Mode Description Comment
 Basic The certificate SAN/CN must match the Domain.  
 Lenient  At least one domain in the list must match.  
 Strict All domain names in the list must match exactly.