Ssl is applying top level certificate to subdomain

This is happening because you’re not using Netlify DNS:

cookiecad.com.          172800  IN      NS      ns-15.awsdns-01.com.
cookiecad.com.          172800  IN      NS      ns-1514.awsdns-61.org.
cookiecad.com.          172800  IN      NS      ns-1834.awsdns-37.co.uk.
cookiecad.com.          172800  IN      NS      ns-858.awsdns-43.net.
;; Received 178 bytes from 205.251.192.15#53(ns-15.awsdns-01.com) in 28 ms

You need to use Netlify DNS if you wish to get automated SSL certificates for subdomains, otherwise: [Support Guide] How to use Netlify’s branch deploy feature without Netlify DNS