Use not-so-commons-ssl to do hostname/certificate verification.