Use not-so-commons-ssl to do hostname/certificate verification.

This verifies the host name against the x509v3 alternative names as noted by the comment by njanrepo.

https://github.com/forcedotcom/rundeck/commit/f709ce7629b76588e514845ff63f5a8d63452b1e#commitcomment-3787957