Please attach session log files from both scenarios.

I've recently been using WinSCP in script mode to download some files from an S3 bucket. I've noticed the original request gets redirected by AWS to the new virtualhost naming scheme and then carrys on and downloads the files. To save the redirection I tried specifying the virtualhost name as it says in the logs but then I get a failed certificte check against
The open command, that's working with the redirect

If I then change it to use the virtualhost, it doesn't work and complains about the certificate

The bucketname isn't techically DNS compliant for the certificate validation of the wildcard, but I don't understand how it's valid when it's redirected to bucket.domain.com-relay.s3.amazonaws.com I assume there's some logic in WinSCP to change the behaviour but it's only doing it when it's redirected.

I would change the name of the bucket to not include ., but that bucket isn't in my control, I only download and delete files from it.

Is anyone able to help, for now I can just leave it with the working redirect but would be nice to save a redirect.