enforceCertificateNameCheck