implementing SAN for domain-based ssl cert; cleanup will be copy openssl.cnf.tpl to /home/openssl; fix button appear for client login;