Is your feature request related to a problem? Please describe.
I deploy openbao / vault on kubernetes with ACME tls certificate. Thus my server tls is not valid for *.cluster.local but only for the public domain. However it is unneccessary that cert-manager has to connect to the public url and not the k8s service url of openbao because it cant trust it.

Describe the solution you'd like
Additional configuration to allow a different tls server name from the server url

/kind feature