HTTPCLIENT-614: allow different strategies when checking CN of x509 cert * Test coverage Contributed by Julius Davies <juliusdavies at gmail.com> Reviewed by Oleg Kalnichevski