[webizen]

nope. tying certificate to vhost is by design. you can have multiple vhosts share the same config (e.g. docroot, etc) and map these vhosts (domain name matching with certificate CN) to the same listener.