TLS hostname check relaxed?