do hostname verification for ssl