Actually we have not a simple Let's Encrypt certificate for the Sandstorm instance used in `servizi.linux.it`. Sandstorm requires random subdomains, so we need a wildcard certificate.
It's not easy to issue a wildcard certificate. Well, it's easy, but it's not that easy to automatize the renewal process because we need to update a `TXT` record in another `BIND9` delegated zone.
In short, actually I'm renewing manually. asd