if no_upstream_cert is set, include SNI value als SubjectAltName, fix #291