christer as documented we had to stop issuing individual LE certs for opalstacked.com:
⚠️ Note: as of 3 November 2020 we're no longer able to issue individual LE certificates for opalstacked.com domains due to rate-limits imposed by the LE service.
Because of this:
- If all of the domains on the site are opalstacked.com subdomains, then the site will be switched to a shared opalstacked.com wildcard certificate.
- If the site has opalstacked.com subdomains mixed with other domains, then the opalstacked.com subdomains will be omitted from the final certificate.
The wildcard is for *.opalstacked.com so it's valid for user.opalstacked.com but not sub.user.opalstacked.com.
If you just need encryption then you can accept the browser warning and go on with your business. The SSL will still work.
If you need to have a valid certificate for sub-subdomains of your opalstacked.com subdomain then you can issue one manually by following the steps in the LE doc linked above.