|
if !cert.IsCA && cert.Subject.CommonName != "" && !isIssuer[cert.Subject.String()] { |
Because of the linked check, this can lead to issues detecting the leaf certificates and thus infos aren't correctly retrieved like the serial number.
This can happen when cert names are getting to long and have no CN but only SAN.
https://community.letsencrypt.org/t/is-common-name-automatically-included-in-san/214002/2
Probably extending the check to check if CN or SubjectAlternativeNames are not empty fixes the issue.