Everything for *.serve.swifton.me is signed using our own certificate. The root CA is available on serve.swifton.me.

All other endpoints are secured by Let's Encrypt certificates.