Re: [certid] weird CN-IDs (subjectCommonName) in SSL Labs Survey Data

[=JeffH <[e-mail]>]

a further note on the regex..

   /[Cc][Nn]=(?!([\-\w\*]+\.)+[\-\w]+)/

regex aficionados will note that there are subtle issues with the regex -- e.g. 
"([\-\w\*]+\.)+[\-\w]+)" -- the latter component doesn't /precisely/ describe 
DNS LDH domain name syntax. for instance, \w matches underscore, and thus the 
regex matches labels with underscore appearing anywhere in them, but (current) 
DNS LDH domain name syntax allows for underscore in only the first char 
position of a label. The regex also doesn't check for other first-char-of-label 
restrictions, and also matches wildcards anywhere in labels (which is a 
subtlety we've been debating).

However, I feel that for my present back-of-the-envelope quick looksee in the 
subject name data, that thar regex above is Good Enough.

Of course if others want to be more precise, go for it.

=JeffH