openssl.pod: Improve doc of -verify_email, -verify_hostname, and -verify_ip

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12932)

diff --git a/doc/man1/openssl.pod b/doc/man1/openssl.pod
index 2855b9eac412a2b57614917d637d5731fac84843..4789be46ef3939e098669a007fb39a99b3b24eb2 100644 (file)
--- a/doc/man1/openssl.pod
+++ b/doc/man1/openssl.pod
@@ -1051,18 +1051,18 @@ B<-verify_depth> limit.
 
 =item B<-verify_email> I<email>
 
-Verify if I<email> matches the email address in Subject Alternative Name or
-the email in the subject Distinguished Name.
+Verify if I<email> matches any email address in a Subject Alternative Name or
+(if no SAN is included) the email address in the subject Distinguished Name.
 
 =item B<-verify_hostname> I<hostname>
 
-Verify if I<hostname> matches DNS name in Subject Alternative Name or
-Common Name in the subject certificate.
+Verify if I<hostname> matches any DNS name in a Subject Alternative Name or
+(if no SAN is included) the Common Name in the subject Distinguished Name.
 
 =item B<-verify_ip> I<ip>
 
-Verify if I<ip> matches the IP address in Subject Alternative Name of
-the subject certificate.
+Verify if I<ip> matches any IP address in a Subject Alternative Name or
+(if no SAN is included) the Common Name in the subject Distinguished Name.
 
 =item B<-verify_name> I<name>