give cert the right hostname