if the server certificate can be used for a non-primary domain, use it
say that certificates are valid too in output