e contains no subject alternative names of the right type (DNS name or email address as appropriate); the default is to use the subject DN when no corresponding subject alternative names are present. If both <b>X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT</b> and <b>X509_CHECK_FLAG_NEVER_CHECK_SUBJECT</b> are specified, the latter takes precedence and the subject DN is not checked for matching names.</p>

<p>If set, <b>X509_CHECK_FLAG_NO_WILDCARDS</b> disables wildcard expansion; this only applies to <b>X509_check_