The problem with using named virtual hosts over SSL is that named virtual hosts rely on knowing what hostname is being requested, and the request can't be read until the SSL connection is established. The ordinary behavior, then, is that the SSL connection is set up using the configuration in the default virtual host for the address where the connection was received. Apparently SNI fixes this, and is supported (and has been for a while) by most browsers... http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI How about a good howto on setting it up for use wtih ISPConfig 2, or on a non-ISPConfig system?