How does AWS certification work on root domain

Question

I have an AWS route 53 domain that's hosting an S3 bucket for my site. I added a wild card cert i.e. *.xyz.com to my domain. However, when I access https://xyz.com the browser doesn't pick up the cert. If I go to to https://www.xyz.net the cert works just fine.

Do I create a new cert? Do I try to configure route 53 to automatically redirect? If so how?

Any help would be appreciated.

Answer 1

You need separate certificate for the root / naked domain.

SSL Certs are valid for the given wildcard depth. * , * .*, * .* .* etc.,

Based on the cert pattern you can notice it is

*.xyz.com not *xyz.com

In case if it matches to all strings in the prefix without a dot. It will match all of the domains like

axyz.com bxyz.com and xyz.com

as well.