DNS challenge and CN record - basics?

[rg305]

@michalh-686

it will work for anything under nemuh.cz?

Not all names.
I already explained this:

@rg305

Then you will only be able to get a cert that cover the related SAN entries:

• nemuh.cz
• *.nemuh.cz
• proxy.nemuh.cz
• *.proxy.nemuh.cz

Names like:

@michalh-686

machine.nemuh.cz
Single domain='test.nemuh.cz'

Can only be indirectly covered by the wildcard entry.