# Domain Name Matching

Domain matching is used to verify if a certificate matches the domain, by comparing the certificate with the domain.

There are three modes for comparison:

^ Mode ^ Description ^ Comment ^
| Basic | The certificate [SAN](/glossary/s/ssl_san)/[CN](/glossary/s/ssl_cn) must match the **Domain**. |   | 
| Lenient | At least one domain in the list must match. |   | 
| Strict| All  domain names in the list must match exactly. |   |