ssl: Validate hostnames