In addition to subjectAltNames of type otherName with an ASN.1 Object Identifier of "id-on-xmppAddr", subjectAltNames of type DNS should also be evaluated when processing identities from a certificate.