Report
Operator: cryptoquick.com still had an SSL problem while surmount.systems worked. Cause was missing names on the Let's Encrypt certificate this host presents, not SERVFAIL. Validating A lookups for apex and www succeeded.
The previous certificate listed 18 names including mail.cryptoquick.com and not cryptoquick.com / www.cryptoquick.com. HTTP Host maps for those names already existed. rustls presents one PEM pair for every SNI.
Fix
Laptop just laptop-renew-cert -- --issue --directory production ran from this machine (Namecheap env already present). Dispatcher hook for extra-zone TXT. First 18-name issue added cryptoquick web names and omitted exophiles.org / www.exophiles.org. Second issue requested the 20 Namecheap-hosted names.
Status 2026-09-08
Live without -k, HTTP 200: cryptoquick.com, www.cryptoquick.com, exophiles.org, www.exophiles.org, yiffa.app, surmount.systems.
Cloudflare zones stay off this certificate.
Git-flow branch for remaining related tree work: bugfix/acme-20-name-floor. Agents never sign and never push.
No secrets, IPs, tokens, or PEM material in this issue.
Report
Operator:
cryptoquick.comstill had an SSL problem whilesurmount.systemsworked. Cause was missing names on the Let's Encrypt certificate this host presents, not SERVFAIL. Validating A lookups for apex and www succeeded.The previous certificate listed 18 names including
mail.cryptoquick.comand notcryptoquick.com/www.cryptoquick.com. HTTP Host maps for those names already existed. rustls presents one PEM pair for every SNI.Fix
Laptop
just laptop-renew-cert -- --issue --directory productionran from this machine (Namecheap env already present). Dispatcher hook for extra-zone TXT. First 18-name issue added cryptoquick web names and omittedexophiles.org/www.exophiles.org. Second issue requested the 20 Namecheap-hosted names.Status 2026-09-08
Live without
-k, HTTP 200:cryptoquick.com,www.cryptoquick.com,exophiles.org,www.exophiles.org,yiffa.app,surmount.systems.Cloudflare zones stay off this certificate.
Git-flow branch for remaining related tree work:
bugfix/acme-20-name-floor. Agents never sign and never push.No secrets, IPs, tokens, or PEM material in this issue.