> I think we should provide our own for all platforms.

I've added a simple cert_hostcheck() function that should
handle '*' wildcard(s) correctly. The function is recursive! (probably
the only one in libcurl). Hopefully the depth shouldn't be a problem.

--gv