Possible that it's an ISP issue, but I'm still not getting the process of obtaining Woof... I still feel like a total noob for some reason, even though I've been around for quite some time...
I had already upgraded openssl to the newest version (compiling from scratch using the LFS procedure) to defeat the HeartBleed vulnerability, and simultaneously had updated my certificates, so did not have this problem.
The affected versions of OpenSSL are OpenSSL 1.0.1 through 1.0.1f (inclusive). Later versions (1.0.1g and ulterior) and previous versions (1.0.0 branch and older) are not vulnerable. Installations of the affected versions are vulnerable unless OpenSSL was compiled with -DOPENSSL_NO_HEARTBEATS.