Exclude le domains

Implements #4880 (closed)

Could have used ssl_letsencrypt column instead but this would have lead to problems (either inconsistent usage if 'y' would mean exclude or problem with default value 'n')