client confirm server hostname in cert