Add rough CN verification. (no subjectAltName or wildcard support yet)