default SSL_VHOSTS to cert CN if it's not in VHOST

- with unit-test

closes #845