First it complains it's unsafe (certificate belongs to another domain) and then it shows 502 bad gateway anyway