Use filename to guess domain when cert isn't readable