without "ssl on" we need "ssl" after the ssl port