Nexagate staging on netcup: a wildcard certificate validated over DNS-01 by our own DNS server.