https://www.rfc-editor.org/rfc/rfc6121.html#section-3.3.1
Use provided host for certificate verification Remove redundant ANONYMOUS mechanism support