[Docs]: webhook.X509CertificateRequest and webhook.X509Certificate: is it safe to check only SANs, ignoring DNSNames, EmailAddresses, IPAddresses, URLs ? #2612
Description
Hello!
I'm trying to write a webhook for x509 certificates, using
webhook.X509CertificateRequest and webhook.X509Certificate.
Is it safe to check only SANs field, ignoring DNSNames, EmailAddresses, IPAddresses, URLs ?
Do I need to check if all SANs with type dns are listed in DNSNames, and vice-versa?