use FQDN for self signed cert