Suggestion: include the CN _and_ the altnames.