ost</b>.</p>

<p>If set, <b>X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS</b> restricts <b>name</b> values which start with &quot;.&quot;, that would otherwise match any sub-domain in the peer certificate, to only match direct child sub-domains. Thus, for instance, with this flag set a <b>name</b> of &quot;.example.com&quot; would match a peer certificate with a DNS name of &quot;www.example.com&quot;, but would not match a peer certificate with a DNS name of &quot;www.sub.example.com&quot;; this flag only applie