Nit-picking: The TLS cert for payments says it's for payments.privatestorage.io. I would like it to instead say it's for payments.private.storage.
payments
payments.privatestorage.io
payments.private.storage