error handling fix
diff --git a/lib/openssl.c b/lib/openssl.c
index c35283f..6be1232 100644
--- a/lib/openssl.c
+++ b/lib/openssl.c
@@ -1275,8 +1275,8 @@
         case X509_V_ERR_CERT_REJECTED:
             ret = PTLS_ALERT_UNKNOWN_CA;
             break;
+        case X509_V_ERR_HOSTNAME_MISMATCH:
         case X509_V_ERR_INVALID_CA:
-
             ret = PTLS_ALERT_BAD_CERTIFICATE;
             break;
         default: