Issue #13034: When decoding some SSL certificates, the subjectAltName extension could be unreported.
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 80b661f..dd61660 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -702,7 +702,7 @@
     /* get a memory buffer */
     biobuf = BIO_new(BIO_s_mem());
 
-    i = 0;
+    i = -1;
     while ((i = X509_get_ext_by_NID(
                     certificate, NID_subject_alt_name, i)) >= 0) {