Colin Taylor

> `rustls` uses the `webpki` crate to verify certificates. `webpki` has an open issue that appears to be on point entitled "During parsing, accept v1 certificates and allow certificates without...

> And yes, this subjectAltName thing seems like a red herring. If we can reproduce this bytestream parsing issue in a standalone way then we've got something to work with....

> In other words, what are the exact transformations I would need to do to that `cert = b'...'` byte sequence to get a byte sequence that, when written to...