Finally doing some housekeeping and updating some personal domains to use Lets Encrypt certificates for websites including this one. At the moment not bothering with certs for domain aliases as pretty much all of those are redirected to the canonical versions.