e resilient to network failure.</li><li><strong>Fixed</strong> <a href=https://tools.ietf.org/html/rfc5280#section-4.2.1.6>SAN</a> field in workload certificates is set as <code>critical</code>. This fixes the issue that some custom certificate verifiers cannot verify Istio certificates.</li><li><strong>Fixed</strong> mutual TLS probe rewrite for HTTPS probes.</li><li><strong>Graduated</strong> <a href=/v1.11/docs/reference/config/networking/gateway/>SNI with multiple certificates support at ingress gateway