default SSL_VHOSTS to cert CN if it's not in VHOST