@praxiscode ok, making more sense now. Just for fun I will send these two posts of yours to cwh support for when they wake up, give it a hour or two, then jump in with a blunt instrument hunting Ingress.I would expect, if they installed it, they will go aha! Like when on the 8th day they remembered they do in fact have an assassin process that killed Tomcat once a minute.Thing is, this certificate doesn't have a passphrase, if that's the Secret, and hasn't changed config in years outside of certain renewals that worked without incident.I'm keen to see what they say. Thanks for all this!