Incorrectly linked SSL Cert

We have a server setup as SNI only running on a single IP. We have a SSL enabled website running as "blah.example.com" that uses a cert for "*.example.com". When we setup a second SSL site for "test.blah.example.com", virtualmin linked the site to the "*.example.com" cert, which won't work because it's a second domain deep. We have a cert for "test.blah.example.com", but we have no way of applying it (through the gui) to the site.

There are a few changes that I would be happy to see:

1. The certificate linking process understands that a star cert should only be used for a domain of that depth. It should not be used for deeper subdomains.
2. The ability to override/break the certificate linking that virtualmin has done.
3. The ability to prevent the automatic linking of certificates as a global virtualmin setting

The ability to break the certificate linking would also be useful in the case you wanted to apply a cert for an alias. As of now, virtualmin could link the certificate based on the parent domain, but you have no way of changing the cert (through the gui) to a cert for the alias. Adding an alias is often our preference over "changing the domain" of the site.