the "tilde.town" cert is misleading, as it was actually used for cgi.tilde.town too, which now doesn't resolve to anything
we use "tilde.town-0001" now iirc
both those certs are useless but certbot was complaining about them not renewing so i just disabled them
yeah