SSL证书的SAN

参考链接http://pkiglobe.org/subject_alt_name.html

When this SSL server certificate is presented to the browser and if the domain from where the certificate is downloaded is the one present in the DNS Name of this certificate then the certificate is accepted by the browser otherwise a warning is issued by the browser.
当这个SSL服务器证书呈现给浏览器时，如果下载证书的域名是该证书的DNS名称中出现的域名，那么该证书将被浏览器接受，否则浏览器将发出警告。

比如某个cloudfareIP 用于网站保护

在SAN字段中会指定保护的域名
证书SHA256与保护域名的证书一致