Hello tbbeta,
On Wed, 6 Jun 2018, at 07:18:13 [GMT +0300] (which was 06:18 where I
live) Maxim wrote:

> SNI is not on a certificate: the server looks which kind on host
> name the client requires on "TLS client hello" and only returns that
> certificate to the client which matches that requested host name.

Sorry, i mistyped my answer.

My mailserver has only a single FQDN and my Postfix uses only one
certificate which contains the CN and no other SAN.

Currently i can not change my mail server for testing.

-- 
Regards
Gwen

Using The Bat! Version 8.3.0.25 (BETA) (32-bit) on Windows 10.0 (Build 17134 )

Attachment: pgpYaqBDLyzVe.pgp
Description: PGP signature

________________________________________________________
 Current beta is 8.3.0.26 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to