Use openssl X509_check_host if available

Since openssl 1.0.2 is more mainstream we should add a check if we're compiling against it and use the X509_check_host method if we are (falling back to our own validation if not).