Lack of support for the Subject Alternative Name (SAN) extension

[joyantaDebnath]

This is a standard extension documented in RFC 5280, essential for hostname verification. When Subject field contains an empty sequence, CAs can mark this extension as critical as well.