handles multiple hosts, https, and skipping cert matching