The hostname validation gets disabled because `{cert_variable_name}` is omitted.
To enable validation, set it to `{cert_variable_safe_value}`.