use certificate subject common name instead of dns names
remove comment