v2.6.25 — 2026-07-23¶ fix(ssl): show aliases/subdomains as secured when covered by the primary cert's SAN