# issue #3953
{
	cert_issuer zerossl api_key
}

example.com {
	tls {
		on_demand
		key_type rsa2048
	}
}

http://example.net {
}

:1234 {
}
----------
{
	"apps": {
		"http": {
			"servers": {
				"srv0": {
					"listen": [
						":1234"
					]
				},
				"srv1": {
					"listen": [
						":443"
					],
					"routes": [
						{
							"match": [
								{
									"host": [
										"example.com"
									]
								}
							],
							"terminal": true
						}
					]
				},
				"srv2": {
					"listen": [
						":80"
					],
					"routes": [
						{
							"match": [
								{
									"host": [
										"example.net"
									]
								}
							],
							"terminal": true
						}
					]
				}
			}
		},
		"tls": {
			"automation": {
				"policies": [
					{
						"subjects": [
							"example.com"
						],
						"issuers": [
							{
								"api_key": "api_key",
								"module": "zerossl"
							}
						],
						"key_type": "rsa2048",
						"on_demand": true
					},
					{
						"issuers": [
							{
								"api_key": "api_key",
								"module": "zerossl"
							}
						]
					}
				]
			}
		}
	}
}