Second level subdomains

Website, Application, Performance Security
1

What is the name of the domain?

mohesr.gov.iq

What is the issue you’re encountering

SSL for second level sub-domains donot work

What steps have you taken to resolve the issue?

at the moment when we want to activate
dirasat.mohesr.gov.iq
email.mohesr.gov.iq
these 2nd-level-subdomains are not covered by SSL.
Shall we just use the ACM (advanced certificate manager) and issue certificates for these sub-domains?
having illustrated steps or documentation for that part will be really helpful.
thx

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Flexible

2

If mohesr.gov.iq is the domain you have added to Cloudflare, then *.mohesr.gov.iq will be covered by the Universal SSL certificate, see…
https://cf.sjr.org.uk/tools/check?27dec27472e548a797a8cd882b53d1f7#connection-server-https

Use only “Full (strict)” to ensure your traffic is fully secured.

1 Like
3

thank you for your clarification, but how come the 2nd level sub-domains are covered by default?

4

They are first-level subdomains of your domain (mohesr.gov.iq) and the Universal SSL certificate covers mohesr.gov.iq and *.mohesr.gov.iq.

Universal SSL would not cover, for example, www.dirasat.mohesr.gov.iq as www would be a second-level subdomain of your domain. For that you would need an advanced certifcate.

2 Likes
5

that is one fine answer. thank you.

2 Likes
6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.