common.go: Allow passing hostnames for the self-signed certificate.

I was hoping this would make local wildcard domains all be trusted, but it
doesn't work that way.