1.975 - work around TEA integration on OS X
1.976 - check wildcard certificates against public prefix