[Docs]: webhook.X509CertificateRequest and webhook.X509Certificate: is it safe to check only SANs, ignoring DNSNames, EmailAddresses, IPAddresses, URLs ?

[filimonic]

Hello!

I'm trying to write a webhook for x509 certificates, using
webhook.X509CertificateRequest and webhook.X509Certificate.

Is it safe to check only SANs field, ignoring DNSNames, EmailAddresses, IPAddresses, URLs ?
Do I need to check if all SANs with type dns are listed in DNSNames, and vice-versa?