oauth2_expected_hostname

The name that is expected in the CN field of the HTTPS server’s certificate. If this parameter is not set, the expected name is the hostname of the HTTPS server.

oauth2_expected_hostname = hostname

This parameter is optional and only relevant when oauth2_server_validation_key is set to the URL of an HTTPS JWKS endpoint and oauth2_disable_verify_hostname is not set to true.