}

  @Test
  fun subjectAlternativeNames() {
    val heldCertificate =
      HeldCertificate
        .Builder()
        .addSubjectAlternativeName("1.1.1.1")
        .addSubjectAlternativeName("cash.app")
        .build()
    val certificate = heldCertificate.certificate
    assertThat(certificate.subjectAlternativeNames.toList()).containsExactly(
      listOf(GeneralName.iPAddress, "1.1.1.1"),

    assertThat(verifier.verify("K.com", session)).isFalse()
  }

  private fun certificateSANs(peerCertificate: X509Certificate): List<String> =
    when (val subjectAlternativeNames = peerCertificate.subjectAlternativeNames) {
      null -> listOf()
      else -> subjectAlternativeNames.map { c: List<*> -> c[1] as String }
    }

  @Test fun replacementCharacter() {
    // $ cat ./cert.cnf
    // [req]

renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> 1769504439 +0000

      ),
    )
    assertThat(okHttpCertificate.commonName).isEqualTo("Jurassic Park")
    assertThat(okHttpCertificate.organizationalUnitName).isEqualTo("Gene Research")
    assertThat(okHttpCertificate.subjectAlternativeNames).isEqualTo(
      Extension(
        id = SUBJECT_ALTERNATIVE_NAME,
        critical = true,
        value =
          listOf(
            CertificateAdapters.generalNameDnsName to "*.example.com",