Wildcard certificate requests
If you want to use the free certificates generated by Azure, then you have to add individual custom domains one by one and allow Azure to request/generate one certificate for each of them.
However, if you want a wildcard certificate (*.tradewindsstudios.us
), then you have to use a certificate authority of your own and purchase a wildcard certificate from them. This is documented very well by Microsoft in this article, and a dedicated article for GoDaddy (but you are not limited to this CA)
The free certificate comes with the following limitations:
- Doesn't support wildcard certificates.
Wildcard custom domains validation
If you just want to add wildcard custom domains to your App Service (or other Azure services like Contain Apps), simply try to add *.tradewindsstudios.us
like any other custom domain (like test.tradewindsstudios.us
) by choosing "Add certificate later".
The CNAME
check is not strict, so you can add it anytime you like before deploying the web app. (So, even if this check shows a warning, you can move on).
The TXT
check tip seems to be inconsistent right now from different Azure products, and some might not show a correct tip. My testing shows that as long as you configured asuid
and asuid.www
properly, it will pass, so you don't need to configure asuid.*
.
Note that since inconsistency can be observed right now, this answer might be just valid right now and might be invalidated by future changes in Azure.