diff --git a/src/bin/mirror.rs b/src/bin/mirror.rs
index f7cb277..554cc7a 100644
--- a/src/bin/mirror.rs
+++ b/src/bin/mirror.rs
@@ -85,10 +85,14 @@ pub async fn run(
 
     let listen_conf = match (bind, acme_domain.is_empty(), acme_cache_path) {
         (_, false, Some(cache_path)) => {
-            log::info!("configuring acme for https at {acme_domain:?}...");
             create_dir_all(&cache_path).await?;
+            let mut domains = acme_domain.clone();
+            if let Some(ref experimental_domain) = experimental_acme_domain {
+                domains.push(experimental_domain.clone())
+            }
+            log::info!("configuring acme for https at {domains:?}...");
             ListenConf::Acme {
-                domains: acme_domain,
+                domains,
                 cache_path,
                 directory_url: acme_directory_url.to_string(),
                 ipv6: acme_ipv6,
diff --git a/src/mirror.rs b/src/mirror.rs
index 27c9ddf..01f1aa7 100644
--- a/src/mirror.rs
+++ b/src/mirror.rs
@@ -396,11 +396,10 @@ pub async fn serve(
             for domain in domains {
                 auto_cert = auto_cert.domain(domain);
             }
-            if let Some(domain) = experimental.acme_domain {
-                auto_cert = auto_cert.domain(domain);
-            }
             let auto_cert = auto_cert.build().expect("acme config to build");
 
+            log::trace!("auto_cert: {auto_cert:?}");
+
             let notice_task = tokio::task::spawn(run_insecure_notice(ipv6));
             let listener = TcpListener::bind(if ipv6 { "[::]:443" } else { "0.0.0.0:443" });
             let app_res = run(app, listener.acme(auto_cert)).await;