I chose this simplistic way of certificate matching because Apache does it the same way in its ssl module