- changed NSS code to not ignore the value of ssl.verifyhost and produce more verbose error messages (#516056)