If you see this on HTTPS, the cert was issued on demand and Host routing worked end-to-end. No Caddyfile edits needed.