title: Invalid Common Name when using a SAN certificate
body: <p>I have generated a certificate for an internal server that is also accessible externally. According to <a href="https://stackoverflow.com/a/5937270/918406">this</a> SO answer the CN and the SAN fields compliment each other and so accordingly I set the CN to server.domain.local and in the SAN I have DNS:server.domain.tld</p>
  
  <p>However, with Chrome at least, I can browse to server.domain.tld (SAN entry) without error but I get a common name mismatch error at server.domain.local (CN)</p>
  
  <p>Is this an implementation error in NSS on Chrome or have I done something wrong? Should I have both server.domain.local and server.domain.tld in the SAN field?</p>