// certificate needs to be valid for it.
	if chi.ServerName != "" {
		x509Cert, err := c.leaf()
		if err != nil {
			return fmt.Errorf("failed to parse certificate: %w", err)
		}
		if err := x509Cert.VerifyHostname(chi.ServerName); err != nil {
			return fmt.Errorf("certificate is not valid for requested server name: %w", err)
		}
	}

	// supportsRSAFallback returns nil if the certificate and connection support

		{"(*Conn).Read", Method, 0},
		{"(*Conn).RemoteAddr", Method, 0},
		{"(*Conn).SetDeadline", Method, 0},
		{"(*Conn).SetReadDeadline", Method, 0},
		{"(*Conn).SetWriteDeadline", Method, 0},
		{"(*Conn).VerifyHostname", Method, 0},
		{"(*Conn).Write", Method, 0},
		{"(*ConnectionState).ExportKeyingMaterial", Method, 11},
		{"(*Dialer).Dial", Method, 15},
		{"(*Dialer).DialContext", Method, 15},
		{"(*QUICConn).Close", Method, 21},

pkg crypto/tls, method (*Conn) SetDeadline(time.Time) error
pkg crypto/tls, method (*Conn) SetReadDeadline(time.Time) error
pkg crypto/tls, method (*Conn) SetWriteDeadline(time.Time) error
pkg crypto/tls, method (*Conn) VerifyHostname(string) error
pkg crypto/tls, method (*Conn) Write([]uint8) (int, error)
pkg crypto/tls, type Certificate struct
pkg crypto/tls, type Certificate struct, Certificate [][]uint8