diff --git a/src/Certificate.hs b/src/Certificate.hs
--- a/src/Certificate.hs
+++ b/src/Certificate.hs
@@ -210,7 +210,7 @@
     when (Validate `elem` opts) $ do
         let cc = CertificateChain (rights objs)
         store  <- getSystemCertificateStore
-        failed <- validate validationChecks store cc
+        failed <- validate defaultHooks validationChecks store (maybe "" id fqhn) cc
         if failed /= []
             then putStrLn ("validation failed: " ++ show failed)
             else putStrLn "validation success"
@@ -224,9 +224,8 @@
                 subject = X509.certSubjectDN cert
                 issuer  = X509.certIssuerDN cert
                 cert    = X509.signedObject $ X509.getSigned signedCert
-        validationChecks = (defaultChecks Nothing) { checkFQHN       = foldl accHost Nothing opts
-                                                   , checkExhaustive = True
-                                                   }
+        validationChecks = defaultChecks { checkExhaustive = True, checkFQHN = isJust fqhn }
+        fqhn = foldl accHost Nothing opts
         accHost Nothing (ValidationHost h) = Just h
         accHost a       _                  = a
 
diff --git a/x509-util.cabal b/x509-util.cabal
--- a/x509-util.cabal
+++ b/x509-util.cabal
@@ -1,5 +1,5 @@
 Name:                x509-util
-Version:             1.4.2
+Version:             1.4.3
 Description:         utility to parse, show, validate, sign and produce X509 certificates and chain.
 License:             BSD3
 License-file:        LICENSE
@@ -24,7 +24,7 @@
                    , x509 >= 1.4.7
                    , x509-store
                    , x509-system
-                   , x509-validation >= 1.4.7
+                   , x509-validation >= 1.4.8
                    , asn1-types >= 0.2
                    , asn1-encoding
                    , pem