nly applies to <b>X509_check_host</b>.</p>

<p>If set, <b>X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS</b> allows a &quot;*&quot; that constitutes the complete label of a DNS name (e.g. &quot;*.example.com&quot;) to match more than one label in <b>name</b>; this flag only applies to <b>X509_check_host</b>.</p>

<p>If set, <b>X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS</b> restricts <b>name</b> values which start with &quot;.&quot;, that would otherwise match any sub-domain in the peer certificate, to only match direct