Add ssl config options, more-correct verification, CN checking/binding, as-good-as-browsers wildcard support, and subjectAltName checking (NO wildcards checked for in subjectAltNames as it's unclear if they should be. Seems anti-thetical to the concept of subjectAltNames to me).