tls: support subjectAltName