WinSCP and S3 buckets

I've recently been using WinSCP in script mode to download some files from an S3 bucket. I've noticed the original request gets redirected by AWS to the new virtualhost naming scheme and then carrys on and downloads the files. To save the redirection I tried specifying the virtualhost name as it says in the logs but then I get a failed certificte check against The open command, that's working with the redirect
If I then change it to use the virtualhost, it doesn't work and complains about the certificate
The bucketname isn't techically DNS compliant for the certificate validation of the wildcard, but I don't understand how it's valid when it's redirected to bucket.domain.com-relay.s3.amazonaws.com I assume there's some logic in WinSCP to change the behaviour but it's only doing it when it's redirected.

I would change the name of the bucket to not include ., but that bucket isn't in my control, I only download and delete files from it.

Is anyone able to help, for now I can just leave it with the working redirect but would be nice to save a redirect.

Please attach session log files from both scenarios.