Update ssl_match_hostname PYTHON-650

This brings us in sync with the code shipped in CPython 3.3.5.