diff --git a/lib/openssl/ssl.rb b/lib/openssl/ssl.rb
index dccc11a55..5fa64b5ef 100644
--- a/lib/openssl/ssl.rb
+++ b/lib/openssl/ssl.rb
@@ -289,7 +289,7 @@ def verify_hostname(hostname, san) # :nodoc:
       san_parts = san.downcase.split(".")
 
       # TODO: this behavior should probably be more strict
-      return san == hostname if san_parts.size < 2
+      return san.casecmp?(hostname) if san_parts.size < 2
 
       # Matching is case-insensitive.
       host_parts = hostname.downcase.split(".")