FIX: openssl cert verification with wild-card certs