Don't check CN name if cert known
Don't check SSLv3 purpose extension