never used @Andstatus for real, but I wonder if my self-signed cert for *.fediverse.com would also have similar problem as yours (since it's one for all subdomains) https://fediverse.com/conversation/225718