private static List<String> getSubjectAlternativeNames(X509Certificate peerCertificate) {
        return X509CertificateUtils.getSubjectAlternativeNames(peerCertificate).stream()
                .filter(san -> san.getType() == DNS || san.getType() == IP || san.getType() == URI)
                .map(SubjectAlternativeName::getValue)
                .toList();
    }
Uses rules from {@link AuthorizedPeers} to evaluate X509 certificates

@author bjorncs
security-utils/src/main/java/com/yahoo/security/tls/PeerAuthorizer.java