tls: using %StringSplit to split `cert.subjectaltname`