Create CertificateVerifierBuilder and fix public key extraction in KeyLengthVerifier
Only use named curves mentioned in BSI specs
Add hostname validation for every TLS connection