title: Caddy serves wrong SSL cert
body: <p>The problem is described in this issue:
  <a href="https://github.com/mholt/caddy/issues/1303" rel="nofollow noreferrer">https://github.com/mholt/caddy/issues/1303</a></p>
  
  <p>I want to fix this information leakage (giving an attacker the opportunity to enumerate all the different hosts served on my webserver).</p>
  
  <p>Does somebody know how to fix it or work around it?</p>