fdm rejects the SSL certificate for one of the pop3s servers listed in my configuration, because the hostname does not match the CN in the X509 structure. However, the hostname does match one of the DNS names listed in the X509v3 Subject Alternative Name extension, and should be considered valid. In fact, other pop3s clients (notably mutt and icedove) do accept the certificate, while fdm requires a "no-verify" option to proceed to my inbox. The attached patch implements the logic to check SANs in case the CN does not match. Best regards, g