So, uh, when my browser checks that the certificate for a site has a DNS SAN that matches the name I used to access it, is the website "logging in" my browser?

And does a signed S/MIME email "log in" to the MUA that receives it?

Authenticate is a perfect good word, let's keep using that.