Use the tlsDomainName function
some failing tests and a dodgy fake for getdns