router: Replace go-vhost with native crypto/tls GetCertificate

Added in Go 1.4