Change CertificateVerifier, so that a hostname is always available

SNI capabilities can be controlled via a boolean flag in the constructor.