SSL on Subdomain

David Kelley

• January 19, 2023 10:54

Hi,

I'm trying to set up my web app on Namecheap under the subdomain qr.pocketaxis.com. Namecheap tell me it doesn't work because of a SSL issue with the main domain 'pocketaxis.com', which is hosted on Brizy cloud.

Can you look into this and add an SSL Certificate for the domain
qr.pocketaxis.com?

Regards,

David

0

• 

  KC George

  • January 19, 2023 12:40

  Hi David,

  It is possible to have a separate SSL certificate authority for a subdomain. You can add CAA Record (Certification Authority Authorization) to your domain so that qr.pocketaxis.com subdomain can use a different certification authority.  

  In consultation with Namecheap, please consider adding a CAA Record to the pocketaxis.com domain. They should be able to suggest the name of the SSL agency they want to use for this subdomain.

  

  0
• 

  David Kelley

  • January 23, 2023 08:39

  Hi KC,

  I did exactly the same thing with my other web app. I allocated the subdomain 'bio.pocketaxis.com' to this app and it works just fine, and has a SSL certificate. What's the difference between the two?

  I'm confused about the whole thing. Obviously the web apps with a subdomain are not hosted on Brizy, but the SSL is covered because my main site 'pocketaxis.com' is a brizy site?

  Can you explain and clarify who normally covers the SSL here...you or Namecheap and why?

  Regards,

  David

  0
• 

  KC George

  • January 24, 2023 05:36

  Hi David,

  Ideally, a wildcard type SSL certificates can be used for securing the main domain and multiple subdomains. This means that all the subdomains like qr.pocketaxis.com can be secured with a single wildcard certificate. However this is possible only if the main domain and the sub domains are hosted on the same server. 

  In your case, since the main domain is hosted on AWS servers (Brizy Cloud) and a sub domain is hosted on EasyWP servers, a single certificate cannot secure both the main and the sub domains. Adding a CAA Record to your domain allows you to use certificates issued by a different certification authority for your sub domain.

  Feel free to share this discussion thread with Namecheap and let us know what they say. 

  0

Please sign in to leave a comment.