SSL Error with www.subdomain.domain.com

[AlexanderN]

Hi! I have some problems with the SSL. I’m trying to connect to my website via: www.xx.xx.com and I receive this error:

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

If I go without the “www” it works fine. I know that this SSL doesn’t support x.x.domain.com, but there’s something that I can do on Cloudflare?

Edit: I saw now, some pages will auto-redirect with www and it’s frustrating because I can’t acces the subdomain.

[CroatiaHR]

You may need to use Advanced Certificate Manager (ACM) to resolve your issue as follows:

More about it here:

• https://developers.cloudflare.com/ssl/edge-certificates/advanced-certificate-manager

SSL/TLS not working on subdomain

Please note, this tutorial post contains links to external sites. I am not endorsing any external links. This tutorial post covers the first steps you should take if SSL is working on your main domain, but not on a subdomain. 1. Is there a DNS record for it? Check the DNS app in your Cloudflare dashboard to see if there is a DNS record there for that subdomain. 2. Check that the DNS record is working correctly You can use a tool such as https://dnschecker.org, enter the subdomain.domain.com …

Subdomain too deep

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.example.com, as these are one level below the root domain, example.com. The certificate will not cover www.sub…

[AlexanderN]

I bought ACM. One more question. Is there any way to introduce “*” for xx.subdomain.domain.com? or I have to introduce them manually?

[sdayman]

You can wildcard the first part of a hostname in a certificate, so *.subdomain.domain.com would work.

But for DNS, only an Enterprise Plan can Proxy a wildcard DNS entry.

[CroatiaHR]

@sdayman Kindly, may I use this opportunity and could I please ask you to add #2335904 to helperbot (I Cced @cloonan while writing a ticket to CF support via my e-mail), cannot login as @fritex to the CF Community after yesterday account modification Thank you in advance!

[AlexanderN]

Thank you! My expression was wrong. I wanted to say if I can write something like this * . *.domain.com
I mean, without www.subdomain. for each subdomain

[sdayman]

Sorry, but you can’t double-wildcard DNS or Certificates.

[AlexanderN]

Ok, thank you! Merry Christmas!