Our documentation already says applications should not call X509_check_host, and directs applications to use X509_VERIFY_PARAM and X509_VERIFY So let's make that official. This assists with further cleanup of X509 verification.