A certificate extension listing the identities the certificate is valid for — DNS names, IP addresses, email addresses, UPNs or URIs. Modern validators ignore the legacy subject common name and match against the SAN list only, so a missing SAN entry is a classic cause of name-mismatch failures. Certificate-based sign-in scenarios frequently require a specific SAN type, such as a UPN entry for user certificates.
SAN
Subject Alternative Name