Protip: If you're using http://acme.sh to handle your certs, make sure you're using the fullchain.cer and not the standalone site .cer or your OpenGraph tags won't work and you'll have NO idea why (the answer is SSL validation issues)