Ssl::verify_certificate( string|WpOrg\Requests\Stringable $host, array $cert ): bool

35	public static function verify_certificate($host, $cert) {36		if (InputValidator::is_string_or_stringable($host) === false) {37			throw InvalidArgument::create(1, '$host', 'string|Stringable', gettype($host));38		}39 40		if (InputValidator::has_array_access($cert) === false) {41			throw InvalidArgument::create(2, '$cert', 'array|ArrayAccess', gettype($cert));42		}43 44		$has_dns_alt = false;45 46		// Check the subjectAltName47		if (!empty($cert['extensions']['subjectAltName'])) {48			$altnames = explode(',', $cert['extensions']['subjectAltName']);49			foreach ($altnames as $altname) {50				$altname = trim($altname);51				if (strpos($altname, 'DNS:') !== 0) {52					continue;53				}54 55				$has_dns_alt = true;56 57				// Strip the 'DNS:' prefix and trim whitespace58				$altname = trim(substr($altname, 4));59 60				// Check for a match61				if (self::match_domain($host, $altname) === true) {62					return true;63				}64			}65 66			if ($has_dns_alt === true) {67				return false;68			}69		}70 71		// Fall back to checking the common name if we didn't get any dNSName72		// alt names, as per RFC281873		if (!empty($cert['subject']['CN'])) {74			// Check for a match75			return (self::match_domain($host, $cert['subject']['CN']) === true);76		}77 78		return false;79	}