https://tools.ietf.org/html/rfc8446#section-6.2
"certificate_unknown: Some other (unspecified) issue arose in processing the certificate, rendering it unacceptable."
A hostname verifier that requires that the server name equals the CN part of the certificate's subject DN,
or matches one of the dnsName-type "Subject Alternative Name" entries of the certificate.