What does this certificate-name check print?

What does this certificate-name check print?

import { checkServerIdentity } from "node:tls";

const cert = {
  subjectaltname: "DNS:api.internal, DNS:*.svc.internal",
};

for (const host of ["api.internal", "orders.svc.internal", "bad.internal"]) {
  const error = checkServerIdentity(host, cert);
  console.log(`${host}: ${error?.code ?? "ok"}`);
}

1. api.internal: ok orders.svc.internal: ok bad.internal: ERR_TLS_CERT_ALTNAME_INVALID
2. api.internal: ok orders.svc.internal: ERR_TLS_CERT_ALTNAME_INVALID bad.internal: ERR_TLS_CERT_ALTNAME_INVALID
3. api.internal: ok orders.svc.internal: ok bad.internal: ok