@Si , Adding more info:
In the Azure Portal, go to your web app and navigate to the “Custom domain” section under “Settings”. Look for the domain you want to secure from the list of “Assigned Custom Domains” and click “Add binding”.
See, Tutorial: Map an existing custom DNS name to Azure App Service
And, just to confirm, did you purchase App Service domain or App Service Managed domain?
Kindly see the different between App Service Certificate and App Service Managed Certificate – each of these certificates can be used for different requirement:
https://microsoft.github.io/AzureTipsAndTricks/blog/tip259.html
Kindly let us know how it goes, I'll follow-up with you further. Thanks for your patience!