Issue #13034: When decoding some SSL certificates, the subjectAltName extension could be unreported.
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index b27353a..84ec477 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -578,7 +578,7 @@
     /* get a memory buffer */
     biobuf = BIO_new(BIO_s_mem());
 
-    i = 0;
+    i = -1;
     while ((i = X509_get_ext_by_NID(
                     certificate, NID_subject_alt_name, i)) >= 0) {