The domain is not an Apex domain (subdomain),
- It is just a CNAME record under the domain
- So the process is straight forward : Configure a custom domain on Azure Front Door
- The subdomains certificates are rotated automatically as long as the CNAME record is still pointing to "FDEndPoint"
- See : managed TLS certificates
You have a Apex domain or Root domain
- Please follow: Onboard a root or apex domain to Azure Front Door to add ALIAS record pointing Apex domain to "FDEndPoint" on how to configure custom domains
- For Apex domains, Azure managed certificates are not automatically rotated.
- See : managed TLS certificates
- Also see: AFD-managed TLS certificate rotation - How to rotate/renew
- This is nothing but regenerating the TXT value and adding it to the DNS Zone
- Also, please share your domain in a private message.
Kindly let us know if the above helps or you need further assistance on this issue.
Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.