For SAN, the common name of the cert was the site's name. If the site's
name wasn't one of the authorized hosts, or wasn't a DNS name, it
failed.