This is exactly why SSL on vhosts won't do the job too nicely - you need a focused IP address since the Host header is encrypted. GregGreg 322k5555 gold badges376376 silver badges338338 bronze badges seven five @Greg, Considering that the vhost gateway is authorized, Couldn't the gateway unencrypt them, notice https://www.ibert.bike/