Domain validation for TLS certificates