This may be more of a `puppetlabs.http.client` question, but it is interesting that the tests didn't appear to have to do anything special to disable the CN validation of the server cert like we had to do with `clj-http.client`.  I think the `localhost.pem` that is referenced here still has a CN of "localhost-puppetdb" so I would expect it to fail the CN validation for a hostname of "localhost".  Is there something we need to do to enable the CN validation (an option) or is this a deficiency in `clj-http.client`?