"Do not validate" has been removed by Android.

You need to use the domain name of the server certificate being used by the authentication server.