public static boolean isCTVerificationRequired(String hostname) {
        if (hostname == null) {
            return false;
        }
        // TODO: Use the platform version on platforms that support it

        String property = Security.getProperty("conscrypt.ct.enable");
        if (property == null || !Boolean.parseBoolean(property)) {
            return false;
        }

        List<String> parts = Arrays.asList(hostname.split("\\."));
        Collections.reverse(parts);

        boolean enable = false;
        String propertyName = "conscrypt.ct.enforce";
        // The loop keeps going on even once we've found a match
        // This allows for finer grained settings on subdomains
        for (String part : parts) {
            property = Security.getProperty(propertyName + ".*");
            if (property != null) {
                enable = Boolean.parseBoolean(property);
            }

            propertyName = propertyName + "." + part;
        }

        property = Security.getProperty(propertyName);
        if (property != null) {
            enable = Boolean.parseBoolean(property);
        }
        return enable;
    }
Check if SCT verification is required for a given hostname.

SCT Verification is enabled using {@code Security} properties.
The "conscrypt.ct.enable" property must be true, as well as a per domain property.
The reverse notation of the domain name, prefixed with "conscrypt.ct.enforce."
is used as the property name.
Basic globbing is also supported.

For example, for the domain foo.bar.com, the following properties will be
looked up, in order of precedence.
- conscrypt.ct.enforce.com.bar.foo
- conscrypt.ct.enforce.com.bar.*
- conscrypt.ct.enforce.com.*
- conscrypt.ct.enforce.*
android/src/main/java/org/conscrypt/Platform.java