Had to add the ServerAlias directive to make sure that requests coming in to non-”www”-prefixed virtual hosts were served by the proper vhost.

Thanks to Leonard Lin for pointing out the problem a while back.