expose cert_hostnames