Getting NET::ERR_CERT_COMMON_NAME_INVALID when requesting *.fatafatboks.com certificate

[ubuntu]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: fatafatbooks.com

I ran this command: sudo certbot certonly --agree-tos --email info@fatafatbooks.com --preferred-challenges=dns-01 --debug-challenges -d *.fatafatbooks.com --server https://acme-v02.api.letsencrypt.org/directory

It produced this output: certificate was issued

My web server is (include version): nginx version: nginx/1.18.0 (Ubuntu)

The operating system my web server runs on is (include version): Ubuntu 22.04.4 LTS

My hosting provider, if applicable, is: aws

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.21.0

When requesting htt[ps://fatafatbooks.com, getting below error:

NET::ERR_CERT_COMMON_NAME_INVALID

This server couldn't prove that it's fatafatbooks.com; its security certificate is from *.fatafatbooks.com. This may be caused by a misconfiguration or an attacker intercepting your connection.

[Osiris]

@ubuntu

-d *.fatafatbooks.com

You only issued a certificate for the wildcard. With wildcard certificates, the * replaces any label, but may not be empty.

If you want a certificate which is also valid for https://fatafatbooks.com/ (i.e., without a subdomain label), you must also add fatafatbooks.com to the certificate. This can be done by simply also adding the -d fatafatbooks.com option to the previously used command.

[ubuntu]

Great, let me try that.

Thanks for the help.