The certificate for *hatch.chat* is used by Synapse (Matrix homeserver).
The wildcard certificate for the *pyrocufflink.net* and *pyrocufflink.blue* domains is now handled by *cert-manager* and saved to *certs.git* by `cert-exporter.