diff --git a/server/private/lib/acmeCertSync.ts b/server/private/lib/acmeCertSync.ts
index 23b24b50b..06b427955 100644
--- a/server/private/lib/acmeCertSync.ts
+++ b/server/private/lib/acmeCertSync.ts
@@ -405,7 +405,8 @@ async function syncAcmeCerts(acmeJsonPath: string): Promise<void> {
                     existing[0].certFile,
                     config.getRawConfig().server.secret!
                 );
-                if (storedCertPem === certPem) {
+                const wildcardUnchanged = existing[0].wildcard === wildcard;
+                if (storedCertPem === certPem && wildcardUnchanged) {
                     // logger.debug(
                         // `acmeCertSync: cert for ${domain} is unchanged, skipping`
                     // );
diff --git a/src/components/ClientResourcesTable.tsx b/src/components/ClientResourcesTable.tsx
index e8ff8ff62..88b1e938e 100644
--- a/src/components/ClientResourcesTable.tsx
+++ b/src/components/ClientResourcesTable.tsx
@@ -52,6 +52,7 @@ import {
     type ResourceSiteRow
 } from "@app/components/ResourceSitesStatusCell";
 import { ResourceAccessCertIndicator } from "@app/components/ResourceAccessCertIndicator";
+import { build } from "@server/build";
 
 export type InternalResourceSiteRow = ResourceSiteRow;
 
@@ -445,6 +446,7 @@ export default function ClientResourcesTable({
                     const fullDomain = resourceRow.fullDomain;
                     const url = `${resourceRow.ssl ? "https" : "http"}://${fullDomain}`;
                     const did =
+                        build !== "oss" &&
                         resourceRow.ssl &&
                         domainId != null &&
                         domainId !== "" &&
diff --git a/src/components/ProxyResourcesTable.tsx b/src/components/ProxyResourcesTable.tsx
index f65ec0b0c..813d232cc 100644
--- a/src/components/ProxyResourcesTable.tsx
+++ b/src/components/ProxyResourcesTable.tsx
@@ -65,6 +65,7 @@ import { ColumnFilterButton } from "./ColumnFilterButton";
 import { ControlledDataTable } from "./ui/controlled-data-table";
 import UptimeMiniBar from "./UptimeMiniBar";
 import { ResourceAccessCertIndicator } from "@app/components/ResourceAccessCertIndicator";
+import { build } from "@server/build";
 
 export type TargetHealth = {
     targetId: number;
@@ -554,6 +555,7 @@ export default function ProxyResourcesTable({
                 const domainId = resourceRow.domainId;
                 const certHostname = resourceRow.fullDomain;
                 const showHttpsCertIndicator =
+                    build !== "oss" &&
                     resourceRow.ssl &&
                     certHostname != null &&
                     certHostname !== "";