Currently we have per-vhost certificates as well as default.pem used in cases when we don't know domain (web, no SNI, legacySSL). It would be useful to add in Add SSL ad-hoc new field "Use as default" that would also update default.pem.