title: Lets Encrypt subdomain not secure
body: <p>I had an LetsEncrypt SSL certificate for my domain (both domain.com and www.domain.com). Now, I wanted to add workflow.domain.com to the certificate. I tried using the expand option of the certbot with the command below:</p>
  
  <pre><code>certbot -d domain.com -d www.domain.com -d workflow.domain.com --expand
  </code></pre>
  
  <p>Certbot returned a success response. However, the browser was still showing insecure...</p>
  
  <p>So, I have revoked my certificates to start clean.</p>
  
  <p>I ran the certbot with <code>certbot --apache</code>. It showed my 3 options correctly, so I choose all 3 to be included in the certificate.</p>
  
  <p>The certbot returns without errors, though the browser keeps showing me insecure on <code>workflow.domain.com</code>?</p>
  
  <p>The output of <code>certbot certificates</code> is as shown below:</p>
  
  <pre><code>Saving debug log to /var/log/letsencrypt/letsencrypt.log
  
  -------------------------------------------------------------------------------
  Found the following certs:
    Certificate Name: domain.com
      Domains: domain.com workflow.domain.com www.domain.com
      Expiry Date: 2019-12-20 15:05:24+00:00 (VALID: 89 days)
      Certificate Path: /etc/letsencrypt/live/domain.com/fullchain.pem
      Private Key Path: /etc/letsencrypt/live/domain.com/privkey.pem
  -------------------------------------------------------------------------------
  </code></pre>
  
  <p>Note, the other 2 domains (domain.com and www.domain.com) show as secure</p>
  
  <p>The virtual host config for the subdomain is shown below:</p>
  
  <pre><code>&lt;IfModule mod_ssl.c&gt;
  &lt;VirtualHost *:443&gt;
          ServerName workflow.domain.com
  
          serverAdmin info@domain.com
          DocumentRoot /var/www/Domain/Workflow
  
          &lt;Directory /var/www/Domain/Workflow&gt;
                  Options Indexes FollowSymLinks MultiViews
                  AllowOverride All
                  Order allow,deny
                  allow from all
          &lt;/Directory&gt;
  
          ErrorLog ${APACHE_LOG_DIR}/error.log
          CustomLog ${APACHE_LOG_DIR}/access.log combined
  
  AddType application/x-font-ttf                  ttc ttf
  AddType application/x-font-otf                  otf
  AddType application/font-woff                   woff
  AddType application/font-woff2                  woff2
  AddType application/vnd.ms-fontobject           eot
  RewriteEngine on
  # Some rewrite rules in this file were disabled on your HTTPS site,
  # because they have the potential to create redirection loops.
  
  # RewriteCond %{SERVER_NAME} =domain.com [OR]
  # RewriteCond %{SERVER_NAME} =www.domain.com
  # RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateFile /etc/letsencrypt/live/domain.com/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
  &lt;/VirtualHost&gt;
  &lt;/IfModule&gt;
  </code></pre>