[NetworkManager] SSL workaround: use correct domain matching