ssl only for the root domain