The work to maintain this eventually became too much for me. Everything I did had to have the custom certificates installed, otherwise it would yell at me. The

The work to maintain this eventually became too much for me. Everything I did had to have the custom certificates installed, otherwise it would yell at me. Then there are systems on which installing certificates is hard, like your niece's iPhone. Oh, just use Overseerr to request that movie. What you you mean? Certificate error? Oh, let me fix it. I get a wildcard from ZeroSSL (after they bought acme.sh) and a couple of non-wildcard ones. One thing to remember that a wildcard for .domain.com doesn't work for .foo.domain.com. You have to get a second-level *.foo.domain.com wildcard.