L/TLS certificates are essential to web security. They became mandatory in 2018. But misconfiguring one can cause a whole load of unintended problems.