Issue warning when certificate has no subjectAltName

Related bug: #497
"required by RFC 2818" is confusing, should this be "deprecated in RFC 2818"?

Also should this be an actual DeprecationWarning?