I can't seem to get nginx to validate CF's origin pull certificate on a hostname using custom hostnames, anyone got a fix for this?