Domain matching is used to verify if a certificate matches the domain, by comparing the certificate with the domain.
There are three modes for comparison:
| Mode | Description | Comment |
| Basic | The certificate SAN/CN must match the Domain. | |
| Lenient | At least one domain in the list must match. | |
| Strict | All domain names in the list must match exactly. | |