Resolution (was: Re: "WARNING: !! EAP session for state ... did not finish!", And Other Warnings)

[Nick Lowe]

You really should have a SAN present. Some clients reject X.509
certificates that miss this.

Google, for example, have plans to stop supporting CNs at all in very
short order - they'll just ignore them completely, relying only on
SANs. If there's no match against them, they will consider the
certificate invalid.

Cheers,

Nick