That is indeed the answer I would have given out as well.Īs for the fact that the client cares about fingerprint only - that is true but only after the client has saved its first fingerprint to the registry.īut at the very first connection by the client when it is first installed, the registry is empty, and then it does consider factors such as Subject and Issuer.
I've noticed that sk66263 was already suggested to Jorgen at the CheckMates thread. 'My name is Gil, I will be assisting you throughout this ticket.