34   // False-y values.
36     host: false,  property
38     error: 'Host: false. is not cert\'s CN: a.com'
41     host: null,  property
43     error: 'Host: null. is not cert\'s CN: a.com'
46     host: undefined,  property
48     error: 'Host: undefined. is not cert\'s CN: a.com'
52   { host: 'a.com', cert: { subject: { CN: 'a.com' } } },  property
53   { host: 'a.com', cert: { subject: { CN: 'A.COM' } } },  property
55     host: 'a.com',  property
57     error: 'Host: a.com. is not cert\'s CN: b.com'
59   { host: 'a.com', cert: { subject: { CN: 'a.com.' } } },  property
61     host: 'a.com',  property
63     error: 'Host: a.com. is not cert\'s CN: .a.com'
68   // to only allow public (non-internal, non-reserved) IP addresses,
71     host: '8.8.8.8',  property
79     host: '8.8.8.8',  property
87     host: '8.8.8.8',  property
94     host: '8.8.8.8',  property
100     host: '8.8.8.8',  property
109   { host: 'b.a.com', cert: { subject: { CN: '*.a.com' } } },  property
111     host: 'ba.com',  property
113     error: 'Host: ba.com. is not cert\'s CN: *.a.com'
116     host: '\n.b.com',  property
118     error: 'Host: \n.b.com. is not cert\'s CN: *n.b.com'
120   { host: 'b.a.com',  property
125     error: 'Host: b.a.com. is not in the cert\'s altnames: ' +
128     host: 'b.a.com',  property
130     error: 'Host: b.a.com. is not cert\'s CN: b*b.a.com'
135     host: 'a.com',  property
142     host: 'a.com', cert: {  property
149     host: 'a.b.a.com', cert: {  property
157     host: 'foo.com', cert: {  property
164     host: 'a.com', cert: {  property
168     error: 'Host: a.com. is not in the cert\'s altnames: ' +
172     host: 'a.com', cert: {  property
176     error: 'Host: a.com. is not in the cert\'s altnames: ' +
180     host: 'a.co.uk', cert: {  property
186     host: 'a.com', cert: {  property
190     error: 'Host: a.com. is not in the cert\'s altnames: ' +
194     host: 'a.com', cert: {  property
198     error: 'Host: a.com. is not in the cert\'s altnames: ' +
202     host: 'a.com', cert: {  property
208     host: 'a.com', cert: {  property
216     host: 'a.com', cert: {  property
220     error: 'Host: a.com. is not in the cert\'s altnames: ' +
224     host: 'b.a.com', cert: {  property
230     host: 'c.b.a.com', cert: {  property
234     error: 'Host: c.b.a.com. is not in the cert\'s altnames: ' +
238     host: 'b.a.com', cert: {  property
244     host: 'a-cb.a.com', cert: {  property
250     host: 'a.b.a.com', cert: {  property
254     error: 'Host: a.b.a.com. is not in the cert\'s altnames: ' +
259     host: 'a.b.a.com', cert: {  property
266     host: 'a.b.a.com', cert: {  property
273     host: 'a.b.a.com', cert: {  property
281     host: 'a.b.a.com', cert: {  property
288     host: '127.0.0.1', cert: {  property
294     host: '127.0.0.2', cert: {  property
302     host: '127.0.0.1', cert: {  property
309     host: 'localhost', cert: {  property
313     error: 'Host: localhost. is not in the cert\'s altnames: ' +
318     host: 'xn--bcher-kva.example.com',  property
323   // an A-label [...]"
325     host: 'xn--bcher-kva.example.com',  property
326     cert: { subject: { CN: 'xn--*.example.com' } },
327     error: 'Host: xn--bcher-kva.example.com. is not cert\'s CN: ' +
328             'xn--*.example.com',
333   const err = tls.checkServerIdentity(test.host, test.cert);