FIX: openssl cert matching with wildcard certs