Subject: bug#35896: 27.0.50; Gmane certificate host does not match hostname

From: Stefan Monnier <[email-masked]>
Date: Sat, 25 May 2019 07:53:31 -0400

Package: Emacs
Version: 27.0.50

Whenever gmane update their certificate NSM asks me for confirmation,
saying:

    The TLS connection to news.gmane.org:nntp is insecure for the following
    reason:

    certificate host does not match hostname

If I look at the certificate info above I see:

    Issued to:       CN=news.gmane.org
    Hostname:        news.gmane.org

So to me, it looks like the hostname matches, except maybe for the "CN="
which seems like a mistake.  Is that a mistake on our side or on Gmane's
or on Let's Encrypt?

        Stefan