debug
use precise64 hostname to match cert