SAN fix - if cert does not contain SubjectAltName, there's an unchecked NULL