K_FLAG_ALWAYS_CHECK_SUBJECT</b> and <b>X509_CHECK_FLAG_NEVER_CHECK_SUBJECT</b> are specified, the latter takes precedence and the subject DN is not checked for matching names.</p>

<p>If set, <b>X509_CHECK_FLAG_NO_WILDCARDS</b> disables wildcard expansion; this only applies to <b>X509_check_host</b>.</p>

<p>If set, <b>X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS</b> suppresses support for &quot;*&quot; as wildcard pattern in labels that have a prefix or suffix, such as: &quot;www*&quot; or &quot;*www&quot;; this o