[AlmostSOLVED]
thanks for the pointers @Osiris and @schoen -
they helped me finding a solution which is almost what i wanted.
mod_vhost_alias does the dynamic stuff, while i have to script Virtual Hosts including certs at startup.
(i might try mod_macro to do this more elegantly)
i guess the crucial point is really this:
While i have access to %0 per connection, obviously i dont have that at startup
but at least i now have all domains on one IP, and mod_vhost_alias co-existing with LE.
that's good already.
thank you again.
s.