refactor SSL logic

[moonming]

But this poses a risk that the SNI and expiration times are likely to be inconsistent with SSL certificates, and there is now no validation mechanism.
A better approach would be:

1. add checks for public and private keys
2. the sni and expiration time are automatically obtained from the certificate.

This PR can be a temporary implementation that will be refactored later. A new issue can be created.

Originally posted by @moonming in #1571 (comment)

[spacewander]

Solved by #3085