CC
B
BCB
F
F
F
WWWWF
F
D
K
subdomain.example.comsomething.subdomain.example.comCCKCCKC
*.example.com, example.com*.subdomain.example.com or something.subdomain.example.com exact for it to work.Ccomexample.comtest2.example.com could also be controlled/operated by someone else. Different levels can be controlled by different people, part of the reason why there's special rules around it like with SSL Certificates.something-subdomain.example.com, using -.*.example.com universal certificate would cover it.KC*.subdomain.example.com or something.subdomain.example.com), which would. Otherwise you'd just get cipher mismatch errors as CF doesn't have a certificate which would be valid to serve for that.CKC*.*.example.com certificates for example, that's not valid. Wildcards always has to be on the left-most side, and only covers that same level.*.example.com -> covers sub.example.com, but not sub.sub.example.com (two levels), *.sub.example.com -> covers sub.sub.example.com, but not sub.sub2.example.com, or example.sub2.sub.example.comCsub-sub2.example.com rather then sub.sub2.example.com or just naming things differentlyKCKCKK
KReason not listed no text box for a written reason appearsK
CCKC
KCK
KCKsubdomain.example.comsomething.subdomain.example.comsomething.subdomain.example.comsomething.subdomain.example.com*.example.com*.example.com*.example.com*.subdomain.example.com*.subdomain.example.comtest2.example.comsomething-subdomain.example.com*.*.example.com*.sub.example.comsub-sub2.example.comsub.sub2.example.comReason not listed