also check host name in cert