ssl/check-cert: Allow different `servername` & `connect` endpoints

[andres-rojas]

This would allow for getting a non-default cert from a target based on the given servername.