Protect GUI HTTPS from some attacks

 - Disable SSLv3 against POODLE
 - Disable RC4 as a weak cipher
 - Set the CommonName to the system host name

This drops compatibility with IE6 and Java 6 - users of those will have to stick to HTTP, which is honestly about as secure anyway on those browsers.

https://nym.se/t/sslreport.pdf