convince hostname to match the cert