Fossil prior to 2.14.2 and 2.15.x prior to 2.15.2 often skips the hostname check during TLS certificate validation.
fossil-scm fossil
fedoraproject fedora 34