Add SSL certificate to subdomain

Support
,
1

Hello my netlify site name is stoic-einstein-1c1ca4.netlify.app,
I’ve just added a new site branch business-stoic-einstein-1c1ca4.netlify.app and connected that with an external DNS to the subdomain business.viblio.com, I need the extension of the SSL certificate to this subdomain.

Thanks in advance,
Antonio Cesari

2

Hi @Viblio,

Thanks for reaching out and welcome to the Netlify Support Forums!

Visiting the site, I see you have a DNS Zone configured for viblio.com, however, it is inactive:

dig viblio.com NS +trace | tail -n 6
;; Received 732 bytes from 192.48.79.30#53(j.gtld-servers.net) in 14 ms

viblio.com.		1800	IN	NS	dns1.registrar-servers.com.
viblio.com.		1800	IN	NS	dns2.registrar-servers.com.
;; Received 95 bytes from 2610:a1:1025::200#53(dns2.registrar-servers.com) in 33 ms

We have a Support Guide on how to detect and fix a inactive DNS Zone here:

I do see that you have viblio.com and www.viblio.com configured for External DNS, so you can remove the inactive DNS Zone by following the solution here.

Please let us know when you’ve removed the inactive DNS zone and double-checked the Support Guide for configuring branch subdomains without Netlify DNS.

3

Ok ,I’ve removed the inactive DNS Zone from the control panel ,
I’ve also checked that the subdomains DNS working properly

nslookup business.viblio.com
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
business.viblio.com	canonical name = business--stoic-einstein-1c1ca4.netlify.app.
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 3.72.140.173
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 34.159.58.69
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 2a05:d014:275:cb02::c8
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 2a05:d014:275:cb00::c8

So I guess that if I’ve made everything correct now you should enable SSL.

Thanks,

4

Hi @Viblio,

You’ll need to configure the branch under www.viblio.com since www.viblio.com is the primary domain on the site.

As mentioned here: [Support Guide] How to use Netlify’s branch deploy feature without Netlify DNS

There are two important considerations:

  1. the subdomain must match the branch name (“slugified ” as needed)
  2. the subdomain will be under the primary custom domain

This second point means that if your primary custom domain is www.example.com then the subdomain will be branch-name.www.example.com and not branch-name.example.com.

Here is an example scenario:

  • the custom domain is www.example.com
  • the branch name is branch-name
  • the branch should be served at https://branch-name.www.example.com/
  • the TTL value (time to live value - more below) will be 3600 seconds which is one hour
  • the sub-domain at Netlify is happy-scientist-123456 (meaning the Netlify URL for the master branch is https://happy-scientist-123456.netlify.app/)

With the values above defined for this example, the DNS record you create would look like so:

branch-name.www 3600 IN CNAME branch-name--happy-scientist-123456.netlify.app.

The format above is required and no other naming conventions will work. The key points for the DNS record are:

  • There should be two dashes between branch-name and happy-scientist-123456.
  • The record should be the type CNAME.
  • The branch name must match the sub-domain you want exactly. If your branch is called staging your sub-domain cannot be stage.www.example.com. It must be staging.www.example.com.

Could you make this correction and let us know when it’s done?

5

Ok, done

nslookup business.www.viblio.com
Server:		127.0.0.53
Address:	127.0.0.53#53

Non-authoritative answer:
business.www.viblio.com	canonical name = business--stoic-einstein-1c1ca4.netlify.app.
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 34.159.132.250
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 34.141.48.9
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 2a05:d014:275:cb01::c8
Name:	business--stoic-einstein-1c1ca4.netlify.app
Address: 2a05:d014:275:cb00::c8

let me know if it’s ok now
thanks

6

Let me know if everything it’s ok

7

Hi @Vibilio,

You’re all set! The subdomain business.www.viblio.com has been added to your site’s SSL certificate. It’s been tested and is loading successfully & securely in my browser.

Hope this helps!

8

yes thanks, everything alright now

9

Thanks for confirming!