Limitations for Universal SSL
Universal SSL certificates are limited by the hostnames they cover and the browsers they support.
Universal SSL certificates only support SSL for the root or first-level subdomains such as
www.example.com. To enable SSL support on second, third, and fourth-level subdomains such as
app3.dev.www.example.com, you can:
- Purchase , to cover more than one level of subdomain, remove Cloudflare branding from the Universal certificate, or adjust the shortest certificate lifespan.
- Upgrade to a Business or Enterprise plan to
On a CNAME setup zone, each subdomain has its own Universal SSL certificate and does not require additional features or purchases.