Add better CN checking, as-good-as-browsers wildcard support, and subjectAltName checking (NO wildcards checked for in subjectAltNames as it's unclear if they should be. Seems anti-thetical to the concept of subjectAltNames to me).