added validation of SANs (Subject Alternative Names)