fixed SSL per host behaviour