# Domain alias not appearing in SSL cert list **URL:** \ **Category:** Support\ **Tags:** netlify-dns-https-ssl\ **Created:** [May 18, 2020, 6:58pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969 "2020-05-18T18:58:18Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [May 18, 2020, 6:58pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/1 "2020-05-18T18:58:18Z")
I’ve got two domain aliases but only one is showing up in the list of domains for the cert. kind-booth-f1f950.netlify.app Default subdomain Options [1dollar1love.org](http://1dollar1love.org) Primary domain Options [www.1dollar1love.org](http://www.1dollar1love.org) Redirects automatically to primary domain Options [1dollar1love.com](http://1dollar1love.com) Domain alias Options [www.1dollar1love.com](http://www.1dollar1love.com) Domain alias SSL/TLS certificate Your site has HTTPS enabled Certificate Let’s Encrypt Domains 1dollar1loveDOTorg, www.1dollar1loveDOTcom, www.1dollar1loveDOTorg Created Yesterday at 3:55 PM Updated Today at 12:42 PM ---
**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\ **Post date:** [May 20, 2020, 3:32pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/2 "2020-05-20T15:32:43Z")
hi there, maybe i am misunderstanding, but i see the same site load regardless of `.com` or `.org` domain name ending. are you seeing what you expect to seeing? ---
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [May 20, 2020, 5:29pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/3 "2020-05-20T17:29:40Z")
The issue is just with the .com URL with no www. > **[1Dollar1Love](https://1dollar1love.com/)** > > The mission of 1dollar1love is to raise money to help fund top national + local organizations addressing all kinds of needs during the pandemic and beyond to those that are the most underserved. You get the “Your connection is not private” screen. You can see that for whatever reason that just that domain is not getting added to the list of domains under “SSL/TLS certificate”. ---
**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\ **Post date:** [May 20, 2020, 5:30pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/4 "2020-05-20T17:30:37Z")
thanks for clarifying, i get it now. I’ll have to wait for someone to chime in who can fix your cert. ---
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [May 24, 2020, 2:24pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/5 "2020-05-24T14:24:01Z")
Just wanted to check in on this to see if anyone has any ideas as to what’s going on here. Thanks. ---
**Author:** ![luke](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/luke/32/39_2.png) [@luke](https://answers.netlify.com/u/luke)\ **Post date:** [May 24, 2020, 7:05pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/6 "2020-05-24T19:05:58Z")
Hi, @mikeriley131. We cannot update the SSL certificate to include `1dollar1love.com` at time time because of conflicting DNS records. There are two records found when I do the lookup: ```nohighlight 1dollar1love.com. 600 IN A 184.168.131.241 1dollar1love.com. 600 IN A 104.198.14.52 ``` The first record pointing to `184.168.131.241` is the issue. This is for an IP address which isn’t at Netlify. Please delete that record, wait for it to time out (so wait ten minutes), and then click the “Renew certificate” button for the SSL certificate in our web app for this site. This should resolve the issue. If it does not resolve it or if there are any questions, please let us know. ---
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [May 28, 2020, 3:07pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/7 "2020-05-28T15:07:47Z")
Hi Luke. So I tried doing the same thing with [onedollaronelove.com](http://onedollaronelove.com), this time ensuring there is only one A record, pointing to 104.198.14.52, and again, I get [onedollaronelove.com](http://onedollaronelove.com) listed with the domains for my TLS cert, but not [www.onedollaronelove.com](http://www.onedollaronelove.com). Any idea what’s up this time? In my DNS settings, the CNAME for www is set to @. ---
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [May 28, 2020, 3:36pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/8 "2020-05-28T15:36:20Z")
Disregard last message as this seems to be working correctly now. ---
**Author:** ![luke](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/luke/32/39_2.png) [@luke](https://answers.netlify.com/u/luke)\ **Post date:** [May 29, 2020, 2:43am UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/9 "2020-05-29T02:43:35Z")
Hi, @mikeriley131, while it is technically working now, the current configuration isn’t recommended. This is because you are directing all site traffic to a single CDN node, the one using the IP address `104.198.14.52`. The “@” in the DNS record for `www` is an alias for “this apex/bare/root domain” (which is `1dollar1love.com` in this case). Checking the DNS records, we do see that the “www” subdomain does point to the apex domain: ```plaintext www.1dollar1love.com. 3599 IN CNAME 1dollar1love.com. 1dollar1love.com. 3599 IN A 104.198.14.52 ``` This means the only IP address which will ever be used for this site in for a CDN node close to San Francisco. This is fine if all of you site visitors are in the western U.S.A. You site isn’t using our full CDN with the current DNS configuration. Even if all your site visitors are on the west coast, we have more than one CDN node near San Francisco. You site could be using multiple servers but, instead, it only uses one. And we never intend for `104.198.14.52` to be the primary server for a site. It just isn’t how Netlify is designed to be used. Our recommended configuration is found here: > **[Configure external DNS for a custom domain](https://docs.netlify.com/domains-https/custom-domains/configure-external-dns/)** > > Configure an external DNS provider to point your domain to our platform. You can use external DNS for a subdomain or apex domain you registered externally. These would be the correct DNS records: ```plaintext www.1dollar1love.com. 3599 IN CNAME kind-booth-f1f950.netlify.app. 1dollar1love.com. 3599 IN A 104.198.14.52 ``` The second part of the solution here will be to make `www.1dollar1love.com` the primary domain for this site. This is what then enables multiple CDN nodes to be used. Right now, `www` is a 301 to the apex domain. This should be changes so that the apex is a 301 redirecting to the `www` subdomain. We also cover the reasons for this here: > **[How to Set Up Netlify DNS - Custom Domains, CNAME, & Records](https://www.netlify.com/blog/2020/03/26/how-to-set-up-netlify-dns-custom-domains-cname-and-a-records/)** > > Learn how to set up DNS on Netlify. Should you choose a subdomain or bare domain? Use Netlify DNS or another DNS provider? See our recommendations to help you best leverage our global CDN. If you look up the IP address for that domain (`kind-booth-f1f950.netlify.app`), you will see that many different IP addresses are returned. Here is an example of me testing locally: ```plaintext $ dig kind-booth-f1f950.netlify.app +short 138.68.244.143 $ dig kind-booth-f1f950.netlify.app +short 104.248.78.24 $ dig kind-booth-f1f950.netlify.app +short 167.172.221.254 ``` Three lookups. Three different IP addresses. If you make `www` a CNAME pointing to `kind-booth-f1f950.netlify.app` your site will being using the full CDN. To summarize, you can keep the current configuration if you want. It is working but not ideally or how Netlify is intended to work. If you don’t make changes though, you won’t be using our CDN (only a single node) and this is neither a recommended or supported configuration. We do recommend changing the DNS records and primary domain to match the instructions in our documentation. If there are any questions about this, please let us know. ---
**Author:** ![mikeriley131](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/mikeriley131/32/10932_2.png) [@mikeriley131](https://answers.netlify.com/u/mikeriley131)\ **Post date:** [June 2, 2020, 6:52pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/10 "2020-06-02T18:52:50Z")
Thank you for the thorough response, Luke. I will make those suggested changes. ---
**Author:** ![sid.m](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/sid.m/32/50638_2.png) [@sid.m](https://answers.netlify.com/u/sid.m)\ **Post date:** [April 28, 2025, 8:14pm UTC](https://answers.netlify.com/t/domain-alias-not-appearing-in-ssl-cert-list/14969/11 "2025-04-28T20:14:51Z")
Unlisted on April 28, 2025, 8:14pm UTC