<CA hash>.signing_policy
trusted_altname.cert - hostname xxx.foo.bar in CN with trusted/ prefix emulating service prefix. altname has DNS:*.hoo.org, DNS:joo.haa.org, IP Address:123.124.220.1, DNS:g*a.e*.com. Should work for corresponding hosts.
-trusted_altname.cert - hostname xxx.foo.bar in CN. altname has DNS:*.hoo.org, DNS:joo.haa.org, IP Address:123.124.220.1, DNS:g*a.e*.com. Should work for corresponding hosts.
+trusted_altname_2.cert - hostname xxx.foo.bar in CN. altname has DNS:*.hoo.org, DNS:joo.haa.org, IP Address:123.124.220.1, DNS:g*a.e*.com. Should work for corresponding hosts.
trusted_altname2.cert - hostname of machine where generated only in the altname. Should work.
trusted_altname2_2.cert - hostname of machine where generated both in CN and altname. Should work.
trusted_altname3.cert - altname with email address and no hostname anywhere. should fail as a host certificate.