RC4-SHA was marked insecure by https://sslanalyzer.comodoca.com
The required domains are now extracted at startup of the container via the docker socket. A certificate that contains all domains as common or alternative name is generated and used.