S3 Bucket names with '.' not eligible for vhost treatment 

since they don't match match the *.s3.amazonaws.com cert.
Most recent Openssl rejects such matches outright and curl --insecure does not seem to be able to override it.