Ran main.sh twice. Logs from the first run have been overwritten. Mismatch on xj-ix.luxe is legitimate: the domain resolves to 2 IP addresses, each with a different certificate.
