ssl_manager's hostname validation logic, at the very least, should be extracted, and tested in a unittest. This will allow us to be more confident about making changes to this code.