hosting: allow a cert to avoid forcing a redirect to ssl