Fix behaviour to match RFC 6265 on encountering domain mismatch.