> It seems, that if a SSL server for a domain is not configured, another > server is used (instead of error-ing out). Is this correct? Yes, the default/first server. The “error-ing out” (with option to proceed anyway) usually happens on the client side/browser which checks that the host name doesn’t match the server SSL certificate. rr