GnuTLS: simplify cert hostname checking