change CN to *; do not disable 8086 when ssl is enabled