When this is enabled cert CN verification is done to the name in the PTR which can cause failures. It probably adds MITM potential.