Add ssl config options, more-correct verification, CN checking/binding, as-good-as-browsers wildcard support, and subjectAltName checking (tries to follow rfc2818 including errata).