Synology Subdomains: SSL, Reverse Proxy, and Dynamic DNS

A subdomain that wouldn't resolve. An SSL certificate that existed but didn't work. Three hours of debugging Synology's certificate management to learn it was never properly assigned.