[Swan] subdomain certs not accepted

[Marc]

> >
> > Working with the CA of the example on this page[1]
> >
> > certutil -S -x -n "Example CA" -s "O=Example,CN=Example CA" \
> > -k rsa -g 4096 -v 12 -d sql:${HOME}/tmpdb -t "CT,," -2
> >
> > certs xxx.example.com are accepted however aaa.bbbb.example.com seem to be
> reject.
> 
> Why? Did you specify constrains in the rightid= ?

no, I only have the right.. = entries that are listed below. I think this is related to windows (again). I have now a cert on android phone.marc.test.example.com that connects.