[Bug 60433] crypt32: SSL chain policy rejects certificates with an iPAddress subject alternative name