prepare domain-based ssl without assign to IP address