Added SAN check to SNI. And SNI now preemts any other host name validation.