because of the problem of wildcards on LE... i was constantly getting this invalid CA shit on there for the same domains
i've just learned that the solution is that `tls.LoadX509KeyPair` in Go for my case there is an intermediate .crt file i need to find and append it to my .crt file and fixed
the whole reason i paid for a TLS wildcard certificate was to solve this problem and the fuckers didn't send the intermediate