# SSL Issues on subdomain that managed in external provider

**URL:** <https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557>\
**Category:** Support\
**Tags:** netlify-dns-https-ssl\
**Created:** [January 17, 2024, 2:44am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557 "2024-01-17T02:44:42Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![afnizarnur](https://avatars.discourse-cdn.com/v4/letter/a/a88e4f/32.png) [@afnizarnur](https://answers.netlify.com/u/afnizarnur)\
**Post date:** [January 17, 2024, 2:44am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/1 "2024-01-17T02:44:42Z")

</div>

Hi there, I have some issues on SSL on my domain that I managed in Cloudflare. The main domain ([afnizarnur.com](https://afnizarnur.com/)) SSL certificate is correct, but when I tried to access all of my subdomain for example in [2013.afnizarnur.com](http://2013.afnizarnur.com/) it is showing `SSL_ERROR_BAD_CERT_DOMAIN`.

I suspect it’s because there are no `*.afnizarnur.com` in the Netlify dashboard? How to add it?

 ![2024-01-17 at 09.33.04](https://global.discourse-cdn.com/netlify/original/3X/4/a/4a999a3678ab3cc4e0f759e968247ccfb7b9e8eb.png)

I already tried to set all DNS settings correctly in Cloudflare. My Netlify site is in `afnizarnur.netlify.app`.

Thanks!

---

<div class="post-metadata">

**Author:** ![dig](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/dig/32/56744_2.png) [@dig](https://answers.netlify.com/u/dig)\
**Post date:** [January 17, 2024, 3:42am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/2 "2024-01-17T03:42:12Z")

</div>

> [@afnizarnur](#):
>
> I suspect it’s because there are no `*.afnizarnur.com` in the Netlify dashboard?

This is an incorrect suspicion.

`afnizarnur.com` is configured on `afnizarnur.netlify.app` while `2013.afnizarnur.com` is configured on `2013--afnizarnur.netlify.app`. So the SSL certificate for the `2013` is generated on the custom domain/SSL page for the latter project, not the former.

---

<div class="post-metadata">

**Author:** ![afnizarnur](https://avatars.discourse-cdn.com/v4/letter/a/a88e4f/32.png) [@afnizarnur](https://answers.netlify.com/u/afnizarnur)\
**Post date:** [January 17, 2024, 4:00am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/3 "2024-01-17T04:00:10Z")

</div>

@dig Ah I see got it, but I use SSL certificate that Netlify provide in the dashboard not in Cloudflare. Do you have any suggestion how to fix this?

---

<div class="post-metadata">

**Author:** ![afnizarnur](https://avatars.discourse-cdn.com/v4/letter/a/a88e4f/32.png) [@afnizarnur](https://answers.netlify.com/u/afnizarnur)\
**Post date:** [January 17, 2024, 4:07am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/4 "2024-01-17T04:07:27Z")

</div>

To be clear: `2013--afnizarnur.netlify.app` is using branch deploy in the project of `afnizarnur.netlify.app`.

---

<div class="post-metadata">

**Author:** ![dig](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/dig/32/56744_2.png) [@dig](https://answers.netlify.com/u/dig)\
**Post date:** [January 17, 2024, 4:35am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/5 "2024-01-17T04:35:57Z")

</div>

> [@afnizarnur](#):
>
> I use SSL certificate that Netlify provide in the dashboard not in Cloudflare.

Cloudflare has nothing to do with the SSL on your site. You are only using Cloudflare for DNS.

> [@afnizarnur](#):
>
> using branch deploy

Branch subdomains are for use with [Netlify DNS](https://docs.netlify.com/domains-https/netlify-dns/) as noted in [this documentation](https://docs.netlify.com/domains-https/custom-domains/multiple-domains/#branch-subdomains).

Reading through the follow support guide provides relevant information for your use case

> [@\[Support Guide\] How to use Netlify’s branch deploy feature without Netlify DNS](https://answers.netlify.com/t/support-guide-how-to-use-netlify-s-branch-deploy-feature-without-netlify-dns/128/1):
>
> Last reviewed by Netlify Support Staff: August 2023 So - you’ve discovered the concept of [branch subdomains](https://docs.netlify.com/domains-https/custom-domains/multiple-domains/#branch-subdomains) and want to use them! But you can’t use Netlify’s [DNS Hosting](https://docs.netlify.com/domains-https/netlify-dns/)? Never fear, there is a way to do this and this post will explain how in detail! Please note, however, that going this route means missing out on single click setup and all the goodness it includes - for example, getting an SSL certificate configured automatically. We also have [Automatic Deploy Subdomains](https://docs.netlify.com/netlify-labs/experimental-features/automatic-deploy-subdomains/), which allows users …

---

<div class="post-metadata">

**Author:** ![afnizarnur](https://avatars.discourse-cdn.com/v4/letter/a/a88e4f/32.png) [@afnizarnur](https://answers.netlify.com/u/afnizarnur)\
**Post date:** [January 17, 2024, 6:25am UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/6 "2024-01-17T06:25:24Z")

</div>

Ok thanks, that what I need!

---

<div class="post-metadata">

**Author:** ![SamO](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/samo/32/41847_2.png) [@SamO](https://answers.netlify.com/u/SamO)\
**Post date:** [January 17, 2024, 6:45pm UTC](https://answers.netlify.com/t/ssl-issues-on-subdomain-that-managed-in-external-provider/110557/7 "2024-01-17T18:45:05Z")

</div>

Awesome. Glad to hear you found your solution.
