@andstatus Agreed, a cert for one domain should not be used on a different domain. That's not something software should allow without at least a warning. But I think I mis-understood @mmn's answer which I thought suggested *requiring* a pre-configured browser-supported certificate.