throw error if we can't much hostname with any alternative name, also throw cl-error-verify in ssl_set_verify callback