os-*-hostname + https-service-endpoints are not compatible (mismatch between apache config and cert/key filenames)

I see other SSL bugs but none are exactly what I am experiencing. I am using JUJU 2.2.1 and keystone 267.

When you enable SSL (https-service-endpoints=true) keystone will configure itself correctly and switch the endpoint type to https. When you deploy another service like glance the certificates will be copied to the new service but the files in /etc/apache2/ssl/glance will have the name cert_glanceadmin.domain.com and key_glanceadmin.domain.com. If you look in the apache config /etc/apache2/site-available/openstack_https_frontend.conf the bindings are listed as the IP per interface instead of the correct name of the file. All services are named and do not use IP addresses.

clip from openstack_https_frontend.conf
    SSLCertificateFile /etc/apache2/ssl/glance/cert_10.1.2.178
    SSLCertificateChainFile /etc/apache2/ssl/glance/cert_10.1.2.178
    SSLCertificateKeyFile /etc/apache2/ssl/glance/key_10.1.2.178
    SSLCertificateFile /etc/apache2/ssl/glance/cert_10.11.0.28
    SSLCertificateChainFile /etc/apache2/ssl/glance/cert_10.11.0.28
    SSLCertificateKeyFile /etc/apache2/ssl/glance/key_10.11.0.28

files in the ssl directory

root@juju-b9757f-0-lxd-11:/etc/apache2/ssl/glance# ll
total 32
dr-xr-xr-x 2 root root 4096 Jul 10 19:21 ./
dr-xr-xr-x 3 root root 4096 Jul 10 19:20 ../
-r--r--r-- 1 root root 1147 Jul 10 20:00 cert_glanceadmin.domain.com
-r--r--r-- 1 root root 1139 Jul 10 20:00 cert_glancepublic.domain.com
-r--r--r-- 1 root root 1151 Jul 10 20:00 cert_glanceinternal.domain.com
-r--r--r-- 1 root root 1708 Jul 10 20:00 key_glanceadmin.domain.com
-r--r--r-- 1 root root 1704 Jul 10 20:00 key_glancepublic.domain.com
-r--r--r-- 1 root root 1704 Jul 10 20:00 key_glanceinternal.domain.com

I can manually alter the name of the file or the apache config and it will work but it does not survive a reboot. Maybe I am doing something wrong or this is a duplicate bug but I would like to help track it down, just let me know what I can do. I only use glance as an example. It impacts all other services as well like NCC, Cinder etc.