From de1eaef9f87825f6bf87ccc698642a70b063be44 Mon Sep 17 00:00:00 2001 From: Brian Sipos Date: Fri, 21 Nov 2025 10:04:04 -0500 Subject: [PATCH] Allow critical SAN extension --- certvalidator/validate.py | 1 + 1 file changed, 1 insertion(+) diff --git a/certvalidator/validate.py b/certvalidator/validate.py index b0cfb05..61693ef 100644 --- a/certvalidator/validate.py +++ b/certvalidator/validate.py @@ -677,6 +677,7 @@ def _validate_path(validation_context, path, end_entity_name_override=None): 'certificate_policies', 'policy_mappings', 'policy_constraints', + 'subject_alt_name', 'inhibit_any_policy', ]) unsupported_critical_extensions = cert.critical_extensions - supported_extensions