Allow wildcard domains for client certificates

Client certificates currently must be configured for each individual domain. When working against many subdomains (e.g. *.internal.example.com), this means repeating the same certificate setup over and over.

Requested: support wildcard domain patterns when configuring a client certificate so one entry can cover all matching hosts.