Wildcard certificate not working for sub domain - how to debug?

Question

Hi!

I have an Amazon Issued certificate in the certificate manager, with "Status=Issued".
It has two domains, like apps.example.com and *.apps.example.com. Both have status Success. 
There are two DNS entries in Cloudflare, one for apps.example.com, and one for my-x.apps.example.com, both pointing to the same Cloudfront
The cloudfront uses the certificate mentioned above, it even links to it.

I can access `apps.example.com` over SSL, but not `my-x.apps.example.com`.

```
* Connected to my-x.apps.example.com (18.xyz.xyz.xyz) port 443 (#0)
* ALPN: offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to my-x.apps.example.com:443
* Closing connection 0
```

**This is what AWS Certificate Manager shows:**
![Enter image description here](/media/postImages/original/IMt0vuNnxITXG47ZxCpe8WWw)

**This is what Cloudfront shows**
![Enter image description here](/media/postImages/original/IMhpi2HtnNQJqtnZs3eWu2rA)

Any idea on how to debug this?!? Any reason for this not to work?

Accepted Answer

Hello.

Looking at the image, it appears that "my-x.apps.example.com" is not linked to CloudFront.  
Please also try adding "my-x.apps.example.com" in the CloudFront distribution settings.  
https://repost.aws/knowledge-center/multiple-domains-https-cloudfront

Wildcard certificate not working for sub domain - how to debug?

Relevanter Inhalt