Intermediate 15 min

SSL certificate for a subdomain

Enable HTTPS Let's Encrypt on api.yourdomain.fr or any subdomain from the web hosting panel.

#SSL#Subdomain#Let's Encrypt#HTTPS

Ready to start your service? Check offers and order online.

View offers and order

SSL certificate for subdomain

Each sub-domain (api.votredomaine.fr) requires its inclusion in the SSL certificate or a dedicated certificate on your web hosting Anthony IT Solutions.

Let's Encrypt free cover subdomains listed explicitly or via Multidomain Certificate (SAN) according to the panel options.

In summary The subdomain DNS must point to pre-generation hosting; add the subdomain in the SSL panel.

What you need

  • Subdomain created, subdomain
  • DNS spread
  • Panel accessible
  • Website responding to HTTP

Prerequisites DNS

  1. Registration A

    Subdomain → IP hosting Anthony IT Solutions.

  2. Test

    ping api.votredomaine.fr or dig.

  3. HTTP OK

    Default page or site available at http://.

  4. No CAA blocking

    CAA records allowing Let's Encrypt.

Generate Certificate

  1. SSL Panel

    SSL section / Let's Encrypt → add host.

  2. Sub-domain tick

    api.yourdomain.fr in addition to domain and www.

  3. HTTP validation

    Automatic via .well-known or DNS file.

  4. Expectation

    1 to 10 minutes; auto renewal.

Force HTTPS

  1. Panel

    SSL Force option / HTTPS Redirect.

  2. .htaccess

    Redirections if necessary.

  3. CMS

    URL site in https:// in config.

  4. Internal links

    No mixed content.

Multiple certificates

Several subdomains = multiple names on separate certificates or certificates.

  • Limit Let's Encrypt: 50 names/ANS according to ACME
  • Wildcard *.domain on request support
  • SSL main domain distinct

Renewal

  • External subdomain (CDN): SSL at CDN
  • REST API: HSTS recommended
  • Webmail mail.domain: dedicated certificate
  1. Auto

    Panel renews 30 d before expiry.

  2. Stable DNS

    Do not change IP without regenerating.

  3. Alerts

    E-mail panel if failure renewal.

  4. SSL Labs Test

    ssllabs.com for optional audit.

Troubleshooting

  • Validation fails, DNS does not point or port 80 blocked.
  • Certificate without subdomain, Regenerate by checking the host.
  • ERR_CERT_COMMON_NAME_INVALID, Access via name absent from the cert.
  • Renewal failed, check DNS and .well-known.

Frequently Asked Questions

A certificate for all ?
SAN multi-name or wildcard according to offer.

Third party subdomain?
DNS at home; SSL on Anthony IT hosting.

www vs without www ?
Include both variants.

SSL paying ?
Let's Encrypt is sufficient for most cases.

Related guides

See also our web hosting offer and all the procedures on wiki web hosting.