use CN for server cert verification if approp. extensions are not present
use CN for server cert verification if approp. extensions are not present

CESNET/canl-c,ellert/canl-c,CESNET/canl-c,ellert/canl-c