Subject Alternative Names (SANs)

What it means

The authoritative list of hostnames, IPs and emails this certificate covers. Modern browsers ONLY look here — the Common Name is legacy.

Why it matters

If your hostname isn't in the SAN list (exactly, or via a one-label wildcard), the certificate doesn't cover it, full stop. This is the field to check for name-mismatch errors.