Huh, I didn't realize Full didn't check certs at all. Why don't they have a mode that checks that the cert is valid for hostname that you have configured cloud

Huh, I didn't realize Full didn't check certs at all. Why don't they have a mode that checks that the cert is valid for hostname that you have configured cloudflare to access (which *.s3.amazonaws.com already has), rather than for the end-point that the destination isn't actually answering on directly itself? Or maybe I'm misunderstanding what was up, have to mess with it more.