diff --git a/source/extensions/clusters/dynamic_forward_proxy/cluster.cc b/source/extensions/clusters/dynamic_forward_proxy/cluster.cc
index 4ace1a05d3633..4778672f50f6d 100644
--- a/source/extensions/clusters/dynamic_forward_proxy/cluster.cc
+++ b/source/extensions/clusters/dynamic_forward_proxy/cluster.cc
@@ -11,6 +11,7 @@
 #include "source/extensions/common/dynamic_forward_proxy/dns_cache_manager_impl.h"
 #include "source/extensions/filters/network/common/utility.h"
 #include "source/extensions/transport_sockets/tls/cert_validator/default_validator.h"
+#include "source/extensions/transport_sockets/tls/utility.h"
 
 namespace Envoy {
 namespace Extensions {
@@ -194,7 +195,7 @@ Cluster::LoadBalancer::selectPool(Upstream::LoadBalancerContext* /*context*/,
     Envoy::Ssl::ConnectionInfoConstSharedPtr ssl = info.connection_->ssl();
     ASSERT(ssl);
     for (const std::string& san : ssl->dnsSansPeerCertificate()) {
-      if (Extensions::TransportSockets::Tls::DefaultCertValidator::dnsNameMatch(hostname, san)) {
+      if (Extensions::TransportSockets::Tls::Utility::dnsNameMatch(hostname, san)) {
         return Upstream::SelectedPoolAndConnection{*info.pool_, *info.connection_};
       }
     }