[Issue 9318] RFC 6125 compliance (SANs-ID vs CN-ID)