Transitioning to Let's Encrypt wildcard certificates
A month ago I issued a wildcard certificate for *.paranoidpenguin.net
and patiently awaited the expiration of my old HPKP policy. Eventually the time to install the new key and certificate arrived, but to my great dismay, things did not turn out according to plan. Upon restarting the Apache web server, I got served with the following (epic) failure: