Good to know that http-kit appears to support this.  I don't think we have any tests in this file that ensure CN validation is being done.  Not sure we want to create `insecure?` true/false variations in this file since I don't think we're trying to test http-kit but just use it as a tool for testing our Jetty server configuration settings.  I like the idea of having `:insecure?` be set to true instead of false, though, since that's most likely how our clients would behave.  If we do that, though, I think we will have to generate and use a new ssl-cert that has a CN of "localhost" in order for the test to pass.  I'd be onboard with that idea if you are.