Re: Resolution (was: Re: "WARNING: !! EAP session for state ... did not finish!", And Other Warnings)

You really should have a SAN present. Some clients reject X.509 certificates that miss this. Google, for example, have plans to stop supporting CNs at all in very short order - they'll just ignore them completely, relying only on SANs. If there's no match against them, they will consider the certificate invalid. Cheers, Nick