We get S/MIME user certificates for functional addresses (e.g. support@example.com) from a commercial provider that do not contain a Common Name, but just E-Mail in the DN and in the SAN. When rolling over to a new certificate, you have at least two ...
