Trying to create a second level subdomain

[jgiox]

I’m trying to create a staging environment for one of services and want to set a 2nd level in the form of staging.subdomain.domain.com and I get the attached error. Any ideas?

[domjh]

Hi @jgiox,

That would be:

Subdomain too deep

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.example.com, as these are one level below the root domain, example.com. The certificate will not cover www.sub…

[jgiox]

@Subdomain too deep

e

Hello,
we already have a dedicated cert from Cloudflare not the universal one as your link indicates but we still get the error from the screenshot.

Best,
Yiannis

[domjh]

Can you post a screenshot of the certificate you have configured with the subdomains you added, and also the domain and subdomain in question, if you can.

[jgiox]

We got the below certificate from CF

And the domain is https://console.staging.finclude.xyz (most probably it won’t be accessible since it sits behind CF Access)

[domjh]

You haven’t added the SAN you need to that certificate. *.example.com will only cover first level subdomains, as with the universal cert.

You will need to add *.staging.finclude.xyz or console.staging.finclude.xyz there.

[jgiox]

Now I get an 526 error, does that mean that I have to change the origin certificate as well?

[domjh]

Yes, if you’re using Cloudflare Origin Certificates, you will need to generate a new one to cover the additional subdomains, as well.