The ZMap team is happy to share ZLint v3.3.0-rc2 (
https://github.com/zmap/zlint/releases/tag/v3.3.0-rc2).
Thank you to everyone who contributes to, and tests, ZLint!
In addition to the changes made in v3.3.0-rc1, v3.3.0-rc2 encapsulates the following:
## New Lints:
- e_subject_common_name_not_exactly_from_san. The common name field in subscriber certificates must include only names from the SAN extension.
- e_rfc_dnsname_empty_label. DNSNames should not have an empty label.
- e_rfc_dnsname_hyphen_in_sld. . DNSName should not have a hyphen beginning or ending the SLD.
- e_rfc_dnsname_label_too_long. DNSName labels MUST be less than or equal to 63 characters.
- e_rfc_dnsname_underscore_in_sld. DNSName MUST NOT contain underscore characters.
- w_rfc_dnsname_underscore_in_trd. DNSName MUST NOT contain underscore characters.
## Misc:
- e_subject_common_name_not_from_san was configured to no longer be effective as of CABF 1.8.0.