Bought a TLS App Service Certifikat but www.customdomain.nn SAN is missing

Question

Bought a TLS App Service Certifikat but www.customdomain.nn SAN is missing

Admin gbg 0

Bought a TLS App service certificate to use for a site built in Power Pages, but the subdomain www (www.customdomain.nn) was not added to the SAN, the SAN contains only the APEX domain name even through I used the domain verification method. I have tried to rekey the certificate multiple times without success and Power Pages does not support using the APEX domain name.

Vimal Lalani 1,735 Reputation points Microsoft External Staff Moderator

2025-10-22T02:04:57.4766667+00:00

Hi @Admin gbg

Just following up to check if your issue has been resolved or if you still require any assistance. Kindly share the requested information asked over private message so we can connect for further troubleshooting if needed.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Admin gbg 0 Reputation points

2025-10-24T10:55:23.24+00:00

The problem is not solved, and i provided the details in PM 2 days ago.

3 answers

Your answer

Vimal Lalani 1,735 Reputation points Microsoft External Staff Moderator

2025-10-22T02:04:57.4766667+00:00

Hi @Admin gbg

Just following up to check if your issue has been resolved or if you still require any assistance. Kindly share the requested information asked over private message so we can connect for further troubleshooting if needed.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Admin gbg 0 Reputation points

2025-10-24T10:55:23.24+00:00

The problem is not solved, and i provided the details in PM 2 days ago.

Answer 1

Hello

Welcome to Microsoft Community Azure

This issue occurs because Azure App Service Certificates don’t automatically include the www subdomain in the SAN when issued for the root domain. Since Power Pages requires an exact domain match, you can:

Create a new App Service Certificate including www.customdomain.nn in the Common Name. Manage TLS/SSL certificates in Azure App Service
Use an external certificate that includes both the APEX and www domains, then import it into Azure Key Vault and bind it to Power Pages. Bind a custom SSL certificate to Power Pages

Rekeying won’t add new SAN entries. If the issue continues, contact Azure Support for assistance.

Answer 2

Dio Xavier 265.5K Volunteer Moderator

I hope the answer is helpful, if you have a different problem, you can contact us through this same thread.

Answer 3

Admin gbg 0

OK, thanks but thats not what this page in Learn says: https://free.blessedness.top/en-us/azure/app-service/configure-ssl-app-service-certificate?tabs=portal

And Option 1 is not an option as a free App Service Managed certificate cant be exported according to the page you linked to, which is a requirement for Power pages, my understanding?
User's image

im confused :-)

Vimal Lalani 1,735 Reputation points Microsoft External Staff Moderator

2025-10-21T02:18:33.5566667+00:00

Hi @Admin gbg

Yes, according to the documentation, your certificate should be a Standard certificate, and it requires both domain verification and email verification.

Have you tried completing these steps? Did that resolve your issue?
Admin gbg 0 Reputation points

2025-10-21T05:59:22.7266667+00:00

the verification passed with domain verification only so how to do both?
ithink the text is missleading as what is saying is that two verification options is valid and the other two are not.
Shree Hima Bindu Maganti 5,805 Reputation points Microsoft External Staff Moderator

2025-10-24T16:57:25.1633333+00:00

Hi @Admin gbg
This issue occurs because Azure App Service Certificates are issued only for the specific domain you purchase, such as customdomain.nn, and do not automatically include the www subdomain in the SAN. Rekeying or re-verifying the certificate will not add new SAN entries. Since Power Pages require an exact domain match, a certificate for just the apex domain cannot be used for www.customdomain.nn. To resolve this, you should create a new certificate that covers both the apex and www domains or use an external SSL certificate that includes both. If you are using a Free App Service Managed Certificate, keep in mind it cannot be exported and therefore only Standard or exportable certificates are compatible with Power Pages. For verification, you only need to complete either domain or email verification, not both. After domain verification, the certificate will be issued successfully.

[http://free.blessedness.top/en-us/azure/app-service/configure-ssl-app-service-certificate?tabs=portal#step-2-verify-domain-ownership]
https://free.blessedness.top/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Crbac%2Cazure-cli#create-a-free-app-service-managed-certificate
If you need further assistance, please let me know.

Share via

Bought a TLS App Service Certifikat but www.customdomain.nn SAN is missing

3 answers

Your answer