Ah, thank you! That makes sense!
Excuse if I ask ignorantly: how do I create a certificate for both?
I’m a complete beginner when it comes to SSL, so I used these instructions: https://certbot.eff.org/lets-encrypt/debianstretch-apache
It seemed to work, but nowhere in there do I specify the domain name.