Oh right, StartSSL only signed the unqualified domain name for my blog. >_<