Fixup hostname for states patch, so cert matches name.