enable rewriting for example.com to https://www.example.com and match
right certificate