I have an SSL certificate where the Common Name doesn't match the url, but the Subject Alternative Name does. The Common Name is the actualMachineName.subnet.subnet.mynetwork.com and the SAN is www.prettyurl.com. I understand older versions of CF don't support this, but the comments regarding Bug #3566218 say that CF10 does. However, I am still getting connection failures telling me the name doesn't match.
Can anyone confirm this should/shouldn't work in CF10? I have imported all of the certs via the keytool and explored all of those issues. The only remaining issue is that the url doesn't match the CN.