session BUGFIX Fix TLS connection with Subject Alternative Name

Without the fix, it's impossible to connect to the server
using client authentication based on Subject Alternative Name
from a X.509 client certificate.

The commit fixes the following <cert-to-name> mapping [1]:
- san-rfc822-name
- san-dns-name x
- san-ip-address
- san-any

Fixes #328
Links: [1] https://datatracker.ietf.org/doc/html/rfc7407#section-4.1

Author: synther

src/session_server_tls.c

@@ -285,7 +285,7 @@ nc_tls_ctn_get_username_from_cert(X509 *client_cert, NC_TLS_CTN_MAPTYPE map_type
         }
         sk_GENERAL_NAME_pop_free(san_names, GENERAL_NAME_free);
 
-        if (i < san_count) {
+        if (i == san_count) {
             switch (map_type) {
             case NC_TLS_CTN_SAN_RFC822_NAME:
                 WRN(NULL, "Certificate does not include the SAN rfc822Name field.");