Verify that assertion contains valid hostname to avoid vulnerability