tls: allow wildcards in common name

see #4592