I am always reminded of that Arthur C. Clarke quote: “Any Sufficiently Advanced Technology Is Indistinguishable From Magic”
Watching them solve problems associated to certificates sometimes brought this quote to mind, especially when they were stumped by a problem...
Yes, sometimes it is a pain to get certificates applied correctly. Especially if you have any other subdomains within the parent domain. It took me awhile to sort it out the first time I got hosting. Even the directions do not make any sense... Fortunately now a lot of hosts have set up utilities that help make it easier. :)
I like those certificates they hand out on the Gemini network. Easy to get and you can date them to be good for ten years if you like... :)