Caddy + Let's Encrypt , certificate not propagated

Started by Pete5, Today at 08:35:46 AM

Previous topic - Next topic
Hi all,

I configured the ACME client on my opnsense to fetch a let's encrypt wildcard certificate. That works so far.

I have caddy installed to propagate this wildcard certificate for my services like nextcloud etc. I followed the instructions shown here
https://docs.opnsense.org/manual/how-tos/caddy.html#
For my wildcard domain (*.mydomain.de) i selected the corresponding certificate (mydomain.de (ACME Client)

I configured my services as subdomains as instructed here
https://docs.opnsense.org/manual/how-tos/caddy.html#wildcard-domain-with-subdomains

For local DNS I use Unbound.

When I call up the web page of my services the connection is not secured accompanied by the corresponding certificate warning.
To me it looks like caddy doesn't propagate the certificate, but i don't know why?

The caddy files look like this:

Caddyfile

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
level DEBUG
}

servers {
protocols h1 h2
}

email webmaster@mydomain.de
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


*.mydomain.de {
tls /usr/local/etc/caddy/certificates/618398dcf287e.pem /usr/local/etc/caddy/certificates/618398dcf287e.key {
}
}

tnas.mydomain.de {
handle {
reverse_proxy https://192.168.64.21 {
}
}
}

wallbox.mydomain.de {
handle {
reverse_proxy https://192.168.65.245 {
transport http {
tls_insecure_skip_verify
}
}
}
}

import /usr/local/etc/caddy/caddy.d/*.conf

JSON Config

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
level DEBUG
}

servers {
protocols h1 h2
}

email webmaster@mydomain.de
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


*.mydomain.de {
tls /usr/local/etc/caddy/certificates/618398dcf287e.pem /usr/local/etc/caddy/certificates/618398dcf287e.key {
}
}

tnas.mydomain.de {
handle {
reverse_proxy https://192.168.64.21 {
}
}
}

wallbox.mydomain.de {
handle {
reverse_proxy https://192.168.65.245 {
transport http {
tls_insecure_skip_verify
}
}
}
}

import /usr/local/etc/caddy/caddy.d/*.conf

My caddy log file

2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "info","ts":"2026-10-24T05:35:49Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:49 Error caddy "debug","ts":"2026-10-24T05:35:49Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "info","ts":"2026-10-24T05:35:12Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:12 Error caddy "debug","ts":"2026-10-24T05:35:12Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "info","ts":"2026-10-24T05:32:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:32:30 Error caddy "debug","ts":"2026-10-24T05:32:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:31:25 Warning caddy "warn","ts":"2026-10-24T05:31:25Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "info","ts":"2026-10-24T05:24:53Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:24:53 Error caddy "debug","ts":"2026-10-24T05:24:53Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:18:08 Warning caddy "info","ts":"2026-10-24T05:18:08Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Error caddy "debug","ts":"2026-10-24T05:18:08Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "info","ts":"2026-10-24T05:11:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:11:30 Error caddy "debug","ts":"2026-10-24T05:11:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "info","ts":"2026-10-24T05:03:24Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:24 Error caddy "debug","ts":"2026-10-24T05:03:24Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "info","ts":"2026-10-24T05:03:22Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:22 Error caddy "debug","ts":"2026-10-24T05:03:22Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "info","ts":"2026-10-24T05:01:41Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}

Any ideas what could be wrong?

My caddy log file

2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "info","ts":"2026-10-24T05:35:49Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:49 Error caddy "debug","ts":"2026-10-24T05:35:49Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "info","ts":"2026-10-24T05:35:12Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:12 Error caddy "debug","ts":"2026-10-24T05:35:12Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "info","ts":"2026-10-24T05:32:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:32:30 Error caddy "debug","ts":"2026-10-24T05:32:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:31:25 Warning caddy "warn","ts":"2026-10-24T05:31:25Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "info","ts":"2026-10-24T05:24:53Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:24:53 Error caddy "debug","ts":"2026-10-24T05:24:53Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:18:08 Warning caddy "info","ts":"2026-10-24T05:18:08Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Error caddy "debug","ts":"2026-10-24T05:18:08Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "info","ts":"2026-10-24T05:11:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:11:30 Error caddy "debug","ts":"2026-10-24T05:11:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "info","ts":"2026-10-24T05:03:24Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:24 Error caddy "debug","ts":"2026-10-24T05:03:24Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "info","ts":"2026-10-24T05:03:22Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:22 Error caddy "debug","ts":"2026-10-24T05:03:22Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "info","ts":"2026-10-24T05:01:41Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}



Unintentionally i posted the logfile twice, sorry for that.

Did you create the additional domains in the Subdomains grid, and in the Handler did you select both the wildcard domain and the subdomain?

Cause it looks like the shared certificate config isn't attached to the subdomains you configured.
Hardware:
DEC740