In this case, it would use the certificate for `someapp.example.com`.

<img src="/img/deployment/https/https03.drawio.svg">

The client already **trusts** the entity that generated that TLS certificate (in this case Let's Encrypt, but we'll see about that later), so it can **verify** that the certificate is valid.

   * ImmutableRangeMap}. As in {@link Builder}, overlapping ranges are not permitted.
   *
   * @since 33.2.0 (available since 23.1 in guava-jre)
   */
  @IgnoreJRERequirement // Users will use this only if they're already using streams.
  public static <T extends @Nullable Object, K extends Comparable<? super K>, V>
      Collector<T, ?, ImmutableRangeMap<K, V>> toImmutableRangeMap(
          Function<? super T, Range<K>> keyFunction,

            message.flags = 0;
            message.setFlag(DcerpcConstants.RPC_C_PF_BROADCAST);
            assertTrue(message.isFlagSet(DcerpcConstants.RPC_C_PF_BROADCAST));

            // Test setting an already existing flag
            message.flags = DcerpcConstants.RPC_C_PF_BROADCAST;
            message.setFlag(DcerpcConstants.RPC_C_PF_BROADCAST);
            assertTrue(message.isFlagSet(DcerpcConstants.RPC_C_PF_BROADCAST));

        // Note: enc_ndr_short(0) for guid fields is already verified above with times(8)
        verify(mockNdrBuffer, times(2)).enc_ndr_small(0); // clock_seq_hi_and_reserved and clock_seq_low are both 0
        verify(mockNdrBuffer).advance(1 * 6); // domain_guid.node
        verify(mockDeferredNdrBuffer, times(6)).enc_ndr_small(0); // node bytes all 0

        // Note: enc_ndr_referent(null, 1) is already verified above with times(4)
    }

   * this initiates service shutdown and returns immediately. If the service is {@linkplain
   * State#NEW new}, it is {@linkplain State#TERMINATED terminated} without having been started nor
   * stopped. If the service has already been stopped, this method returns immediately without
   * taking action.
   *
   * @return this
   * @since 15.0
   */
  @CanIgnoreReturnValue
  Service stopAsync();

  /**

   *
   * @param socketAddress the socket address to bind the server on
   */
  @Synchronized
  @Throws(IOException::class)
  private fun start(socketAddress: InetSocketAddress) {
    check(!closed) { "close() already called" }

    val alreadyStartedAddress = socketAddress_
    if (alreadyStartedAddress != null) {
      check(socketAddress.address == alreadyStartedAddress.address) {
        "unexpected address"
      }

 * located in).
 * - share + uncpath within it: This is the relevant information for most SMB requests. Both are adjusted by DFS
 * referrals. Nested resources will inherit the information already resolved by the parent resource.
 *
 * Invariant:
 * A directory resource must have a trailing slash/backslash for both URL and UNC path at all times.
 *
 * @author mbechler
 *
 */

    // Check from the end of the list backwards (minimize expected cost of
    // moving elements when remove() is called). Stop before 'from' because
    // we already know that should be kept.
    for (int n = list.size() - 1; n > from; n--) {
      if (predicate.apply(list.get(n))) {
        list.remove(n);
      }
    }

        operation -->> dep: Raise other exception
        dep -->> handler: Auto forward exception
    end
    operation ->> client: Return response to client
    Note over client,operation: Response is already sent, can't change it anymore
    opt Tasks
        operation -->> tasks: Send background tasks
    end
    opt Raise other exception
        tasks -->> dep: Raise other exception
    end

// additionally support watching storage for changes.
type iamStorageWatcher interface {
	watch(ctx context.Context, keyPath string) <-chan iamWatchEvent
}

// Set default canned policies only if not already overridden by users.
func setDefaultCannedPolicies(policies map[string]PolicyDoc) {
	for _, v := range policy.DefaultPolicies {
		if _, ok := policies[v.Name]; !ok {
			policies[v.Name] = defaultPolicyDoc(v.Definition)