Assert Hostname

[dnascimento]

Eforce to define the hostname when generating the token and the CSR.
The CA already matches the token hostname if exists