Now handles DNS alt names correctly (or at least it should full testing not yet done)