[PATCH 1/2] tls: Validate peer certificate's DNSNames against mask