code: private void doCustomServerIdentityCheck(X509Certificate cert) throws CertificateException{
  		if (EndpointIdentificationAlgorithm.APIS == identityAlg) {
  			APINameChecker.verifyAndThrow(trustedNameSet, cert);
  		}
  	}
docs: check server identify as per tls.trustedNames in client.yml.
  
  Notes: this method should only be applied to verify server certificates on the client side.
  
  @param cert
  @throws CertificateException