diff --git a/logo.svg b/logo.svg
index f90b625..98d8f1d 100644
--- a/logo.svg
+++ b/logo.svg
@@ -3,11 +3,16 @@
   <rect width="100%" height="100%" fill="#dadada" />
   <!-- top line -->
   <line x1="34" y1="8" x2="34" y2="28" stroke="#4080ff" stroke-width="12" />
-  <!-- line next to circle -->
-  <line x1="34" y1="28" x2="34" y2="72" stroke="#7d64e3" stroke-width="12" />
+  <!-- bottom half of line next to circle -->
+  <line x1="34" y1="52" x2="34" y2="72" stroke="#7d64e3" stroke-width="12" />
+  <!-- bottom shadow -->
+  <path d="M 39.3 69.3 A 22 22 0 0 1 28.9 56.5" fill='none' stroke="#555" stroke-width="1.5" stroke-linecap='round' />
   <circle cx="50" cy="50" r="16" fill="none" stroke="#7d64e3" stroke-width="12" />
+  <!-- top shadow -->
+  <line x1="40" y1="31.2" x2="40" y2="45.9" stroke="#555" stroke-width="1.5" stroke-linecap='round' />
+  <!-- top half of line next to circle -->
+  <line x1="34" y1="28" x2="34" y2="52" stroke="#7d64e3" stroke-width="12" />
   <!-- bottom line -->
   <line x1="34" y1="72" x2="34" y2="92" stroke="#00c8f0" stroke-width="12" />
-  <line x1="40.3" y1="30.9" x2="40.3" y2="45.9" stroke="#555" stroke-width="1" stroke-linecap='round' />
-  <path d=" M 39.5 69.7 A 22 22 0 0 1 28.5 55.5" fill='none' stroke="#555" stroke-linecap='round' />
+
 </svg>
diff --git a/todo.md b/todo.md
index c6b605a..7d32e4d 100644
--- a/todo.md
+++ b/todo.md
@@ -9,3 +9,5 @@
       keyboard).
 * See if WebSockets tunnel correctly
 * Pretty sure we need to be mutex-locking the cancelFunc calls
+* Getting new certs isn't working behind Cloudflare. Might be able to fix by
+  using the HTTP challenge and allowing HTTP on the Cloudflare side.