Not sure if you got this working. In case you didnt, just add a DNS Record to your DNS Server pointing to your Management IP. Should work right away.

Dear TRN, It works for me with (C9800-40, V17.6.4) older versions were a nightmare. Easiest way was by importing a PKCS12 wildcard Certificate including the CA Chain.  You can do this by uploading your wildcard certificate via: Configuration->PKI Man...