@Osiris: I’m assuming you’re referring to my OpenVPN script example. The script in question simply looks up configuration in a local database, and it uses only the CN to do so – it completely ignores all SANs. (Should it be rewritten? Maybe.)
The example was only meant to illustrate that some automated processes expect the CN to be what they expect it to be, and do not work if it is otherwise.