Hostname obtained from the server certificate, it's more suitable than
using the IP address directly, even if the certificate has a valid entry
for the IP address.
Additionally, dns.cloudflare.com was no longer a valid hostname in the
server certificate for the documented DoH servers.