Access to the Subject Alternate Names (SAN) was added in commit [a5843e5983d1be0b].
Since OpenSSL can now check the subject name for us, this was enabled in commit [65f84287e754ff50].
The -validatecommand callback can also be used to manually check all of the certificates too.