add ssl nginx conf for non www host, but cert CN for www