Damn it.

@emily

it's always DNS
but sometimes it's certs