fetch what we've asked for before returning
don't hardwire default SSL cert filenames based onnginx_server_name (that probably hasn't been set yet either)