Often hostnames can be found within SSL certificates. This issue proposes to add a "--include-ssl-terms" or something better named to tell vhostscan to pickup and create a dictionary from located ssl certificates to append to any wordlist scan prior to when matching / filtering is done.