Support host header for fetching origin certs

In some cases, an end point might be behind a CDN and what you really want to monitor is the cert from the origin. The way to resolve this would be with an IP and an optional host header.