The hostname specified by the user (client) must be the same as the hostname in the server's certificate (CN or dNSname) (see RFC 2830 for details).