* **TCP doesn't know about "domains"**. Only about IP addresses.
    * The information about the **specific domain** requested goes in the **HTTP data**.
* The **HTTPS certificates** "certify" a **certain domain**, but the protocol and encryption happen at the TCP level, **before knowing** which domain is being dealt with.
* **By default**, that would mean that you can only have **one HTTPS certificate per IP address**.

 * whenever there is a chance the check may fail "in real life". Example:
 *
 * {@snippet :
 * Bill bill = remoteService.getLastUnpaidBill();
 *
 * // In case bug 12345 happens again we'd rather just die
 * Verify.verify(bill.status() == Status.UNPAID,
 *     "Unexpected bill status: %s", bill.status());
 * }
 *
 * <h3>Comparison to alternatives</h3>
 *

 * whenever there is a chance the check may fail "in real life". Example:
 *
 * {@snippet :
 * Bill bill = remoteService.getLastUnpaidBill();
 *
 * // In case bug 12345 happens again we'd rather just die
 * Verify.verify(bill.status() == Status.UNPAID,
 *     "Unexpected bill status: %s", bill.status());
 * }
 *
 * <h3>Comparison to alternatives</h3>
 *

            verify(mockNdrBuffer).derive(anyInt());
            // Verify each node byte is encoded
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xAA);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xBB);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xCC);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xDD);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xEE);

        """.trimIndent(),
      )
    assertThat(verifier.verify("foo.com", session)).isFalse()
    assertThat(verifier.verify("a.foo.com", session)).isFalse()
    assertThat(verifier.verify("bar.com", session)).isFalse()
    assertThat(verifier.verify("a.bar.com", session)).isFalse()
    assertThat(verifier.verify("\u82b1\u5b50.co.jp", session)).isFalse()
    assertThat(verifier.verify("a.\u82b1\u5b50.co.jp", session)).isFalse()
  }

        verify(mockNdrBuffer).enc_ndr_long(5); // current_uses
        verify(mockNdrBuffer).enc_ndr_referent("C:\\test", 1);
        verify(mockNdrBuffer).enc_ndr_referent("password", 1);
        verify(mockNdrBuffer).enc_ndr_referent(shareInfo502.security_descriptor, 1);

        // Verify string encodings
        verify(mockDeferredBuffer, times(4)).enc_ndr_string(anyString());

        // Verify security descriptor encoding

import static org.junit.jupiter.api.Assertions.assertNotNull;
import static org.junit.jupiter.api.Assertions.assertThrows;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.times;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;

import java.net.InetAddress;
import java.net.UnknownHostException;

import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;
import org.mockito.Mock;

        // Then - verify all operations
        assertEquals(mid, messageBlock.getMid());
        assertEquals(command, messageBlock.getCommand());
        assertEquals(digest, messageBlock.getDigest());
        assertEquals(response, messageBlock.getResponse());

        // Reset and verify
        messageBlock.reset();
        verify(messageBlock).reset();
    }

    @Test

        String str = spy.toString();

        // Verify all methods were called except toString (Mockito limitation)
        verify(spy).getFileInformationLevel();
        verify(spy).size();
        verify(spy).encode(buffer, 0);
        verify(spy).decode(buffer, 0, 8);
        // Note: Cannot verify toString() with Mockito - it's a special method

        // Verify return values

        response.setUid(1000);
        verify(response).setUid(1000);

        doNothing().when(response).setExtendedSecurity(true);
        response.setExtendedSecurity(true);
        verify(response).setExtendedSecurity(true);

        doNothing().when(response).setSessionId(999L);
        response.setSessionId(999L);
        verify(response).setSessionId(999L);

        // Test reset method