Comment Comment by xg15 > How do you verify the common name/subject alt name actually matches when using a client cert.This seems exactly like a reason to use client certs with public CAs.You (as in, the server) cannot verify this at all, but a public CA could. parent xg15 9 months ago
This seems exactly like a reason to use client certs with public CAs.
You (as in, the server) cannot verify this at all, but a public CA could.