I am hosting my website on Vercel.com and the web application on Heroku. The web application allows for dynamic subdomains per client. I also have a staging environment on Heroku for the web application. My goal is to get the following working all with SSL configured appropriately.
As long as everything has a valid certificate at the origin, the rest is pretty straightforward.
ta
The first two are easy, as that’s covered by Cloudflare’s Universal SSL.
@sdayman I have upgraded my account and created 2 certificates that I believe should work. I think point my *.example.com to my herokudns.com for production and *.staging.example.com to herokudns.com for staging. With that, I get SSL_ERROR_UNRECOGNIZED_NAME_ALERT.
That SSL_ERROR_UNRECOGNIZED_NAME_ALERT message means there’s an invalid certificate.
As you can tell from your DNS records, you can’t Proxy a * wildcard DNS entry (unless you’re on an Enterprise plan). So ACM doesn’t apply. With that in mind, the connection goes directly to the origin, bringing us back to this:
Ok, well our clients will be able to choose their own subdomain so I suppose it won’t be possible to do that. Let me give the cert upload a try and see if it meets our needs. Thank you!