cert hostname validation is case insensitive and stricter for wildcard certificates