title: How do Common Names (CN) and Subject Alternative Names (SAN) work together?
body: <p>Assuming the Subject Alternative Name (SAN) property of an SSL certificate contains two DNS names</p>
  <ol>
  <li><code>domain.example</code></li>
  <li><code>host.domain.example</code></li>
  </ol>
  <p>but the Common Name (CN) is set to only one of both: <code>CN=domain.example</code>.</p>
  <ul>
  <li>Does this setup have a special meaning, or any [dis]advantages over setting both CNs?</li>
  <li>What happens on server-side if the other one, <code>host.domain.example</code>, is being requested?</li>
  </ul>
  <p>Specifically, how does <em>OpenSSL 0.9.8b+</em> handle the given scenario?</p>