pe (DNS name or email address as appropriate); the default is to ignore the subject DN when at least one corresponding subject alternative names is present.</p>

<p>The <b>X509_CHECK_FLAG_NEVER_CHECK_SUBJECT</b> flag causes the function to never consider the subject DN even if the certificate contains no subject alternative names of the right type (DNS name or email address as appropriate); the default is to use the subject DN when no corresponding subject alternative names are present. If both <b>X509_CHEC