https://www.cabforum.org/Baseline_Requirements_V1.pdf

[exchange12rocks]

9.2.1 Subject Alternative Name Extension
Certificate Field: extensions:subjectAltName
Required/Optional: Required

Contents: This extension MUST contain at least one entry. Each entry MUST be either a dNSName containing the
Fully-Qualified Domain Name or an iPAddress containing the IP address of a server. The CA MUST confirm that
the Applicant controls the Fully-Qualified Domain Name or IP address or has been granted the right to use it by the
Domain Name Registrant or IP address assignee, as appropriate.
Wildcard FQDNs are permitted.


9.2.2 Subject Common Name Field
Certificate Field: subject:commonName (OID 2.5.4.3)
Required/Optional: Deprecated (Discouraged, but not prohibited)