In article <2tkpp2-89j.ln1@news.heiming.de>,
Michael Heiming <michael+USENET@www.heiming.de> wrote:
>Your browser will check the cert against reverse DNS and
>bail out if these don't match, end of story.
The check is done against forward DNS, not reverse.