Use backports.ssl_match_hostname, instead of having our own logic

Closes #374

Signed-off-by: Tomaz Muraus <tomaz@apache.org>
Update tox config.
Include original error message in the thrown exception.
Require backports.ssl_match_hostname package for tests.