diff --git a/ipalib/x509.py b/ipalib/x509.py
index be649033b..05b15dad7 100644
--- a/ipalib/x509.py
+++ b/ipalib/x509.py
@@ -397,7 +397,10 @@ class IPACertificate:
             for value in values:
                 match_san.append(('DNS', value))
 
-        ssl.match_hostname(match_cert, DNSName(hostname).ToASCII())
+        # deprecated in Python3.7 without replacement
+        ssl.match_hostname(  # pylint: disable=deprecated-method
+            match_cert, DNSName(hostname).ToASCII()
+        )
 
 
 def load_pem_x509_certificate(data):