Add hostname validation to X509Certificate