Keys are looked up in that order, unless otherwise specified.
<client> is the client's virtual address.
<servername> must be a valid lowercase DNS hostname and not look like
-an address, or be COMMON, DEFAULT or SERVER.
+an address, or be COMMON or SERVER.
There are also: