TLS Certificate is wrong

[asymptonic]

My browser is warning of a not secure connection because the TLS cert from LetsEncrypt is for a CN of www.naxja.org, but there is no subject alternative name (SAN) for just naxja.org. This should be pretty easy to fix in the letsencrypt config I think.