title: AWS SSL Beanstalk Hostname not matching
body: <p>I followed the following tutorial to setup an <strong>SSL Certificate</strong> with a <strong>parent domain hosted at another provider</strong> than aws to create a secure connection to <strong>my REST Api</strong>.
  <a href="https://medium.com/@sonalishah_63223/how-to-host-subdomain-in-aws-route-53-for-an-existing-parent-domain-with-different-service-9b4dde061b85" rel="nofollow noreferrer">https://medium.com/@sonalishah_63223/how-to-host-subdomain-in-aws-route-53-for-an-existing-parent-domain-with-different-service-9b4dde061b85</a></p>
  <p><strong>Setup:</strong></p>
  <p>Hosted Zone -&gt; Record pointing to - Elastic Load Balancer - Beanstalk -&gt; EC2 (Spring Application)</p>
  <p>Setup Description:</p>
  <p>I created a hosted zone (<strong>sub.mydomain.at</strong>).
  In that hosted zone I created a record (<strong>api.sub.mydomain.at</strong>) pointing to the Elastic Load Balancer.</p>
  <p>Everything works fine, API is callable.</p>
  <p>Afterwards I created a certificate through ACM.
  (*<strong>.mydomain.at</strong>) which has been successfully issued.</p>
  <p>I attached it to my load balancer and it seems to work, when calling the API via https://.
  But <em>Postman throws the following</em> error.</p>
  <pre><code>SSL Error: Hostname/IP does not match certificate's altnames
  </code></pre>
  <p>I could turn off &quot;Enable SSL certificate verification&quot; and it <strong>would work, but this does not seem to be the right solution.</strong>
  So I created <strong>another Certificate</strong> for the domain api.sub.mydomain.at which is not verifying. According to <code>nslookup</code> the server can't find the domain even if the CNAME is setup. (I assume it is not possible to create a CNAME with multiple 'sub-domains')
  <code>_12312&lt;long-_number&gt;.api.sub.mydomain.at</code></p>
  <p>So how can I resolve the Issue &quot;Hostname/IP does not match certificates alt names&quot;?</p>