The current way is to disable ssl and reenable it, then it will generate a new certificate including the new aliases.