SSL interaction with client checking server's CN