# Issue with subdomains

**URL:** <https://community.letsencrypt.org/t/issue-with-subdomains/3817>\
**Category:** Issuance Policy\
**Created:** [November 14, 2015, 4:54pm UTC](https://community.letsencrypt.org/t/issue-with-subdomains/3817 "2015-11-14T16:54:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![loganaden](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/loganaden/32/1990_2.png) [@loganaden](https://community.letsencrypt.org/u/loganaden)\
**Post date:** [November 14, 2015, 4:54pm UTC](https://community.letsencrypt.org/t/issue-with-subdomains/3817/1 "2015-11-14T16:54:37Z")

</div>

Hi guys,

Thanks for letsencrypt !

It powers [http://hackers.mu/](http://hackers.mu/). We are from Mauritius.

However, we have HTST issues with [logan.hackers.mu](http://logan.hackers.mu) and

[selven.hackers.mu](http://selven.hackers.mu). and [shaanxoryog.hackers.mu](http://shaanxoryog.hackers.mu).

On firefox, people get this error:

This site uses HTTP Strict Transport Security (HSTS) to specify that

Firefox only connect to it securely. As a result, it is not possible

to add an exception for this certificate.

Can you please also whitelist the sub-domains ?

Kind regards,

---

<div class="post-metadata">

**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\
**Post date:** [November 15, 2015, 12:53am UTC](https://community.letsencrypt.org/t/issue-with-subdomains/3817/3 "2015-11-15T00:53:20Z")

</div>

Or temporarily disable HSTS. Note that removing the header won’t do that; you need to leave it in place but set the max-age to 0.