Add an http_hostname option

Add an http_hostname option, though for now it only specifies alternate
CN values that we'd accept in the server's certificate's subject name
field.
Support dnsName subjectAltName hostname matching

Parse subjectAltName extensions when checking for a hostname match,
which also requires that we accept certificates without subject names.