bugfix: check self-signed cert names for forbidden chars, closes #239