Bad Certificate (example.com) loads on www subdomain

When my trellis site is requested over the www sub-domain, it loads a certificate for example.com.

The only contents of /etc/nginx/ssl/letsencrypt/ is:

mysite.com-c9bbd7f-bundled.cert  mysite.com.key

Whoops. Didn’t have redirects set:

    site_hosts:
      -
        canonical: mysite.com
        redirects:
          - www.mysite.com
``