[{"data":1,"prerenderedAt":252},["ShallowReactive",2],{"docs:\u002Fdocs\u002Fdeleg\u002Fwildcard":3},{"id":4,"title":5,"body":6,"description":244,"extension":245,"meta":246,"navigation":247,"path":248,"seo":249,"stem":250,"__hash__":251},"docs\u002Fdocs\u002Fdeleg\u002Fwildcard.md","泛域名与子域覆盖",{"type":7,"value":8,"toc":235},"minimark",[9,17,21,83,86,115,118,121,172,175,178,191,194,210,232],[10,11,12,13],"p",{},"托管一条域名后,它能覆盖哪些申请写法?规则只有一条:",[14,15,16],"strong",{},"托管裸域,同时服务裸域与它的一级泛域名;二级及以上子域要单独托管。",[18,19,20],"h2",{"id":20},"覆盖关系表",[22,23,24,40],"table",{},[25,26,27],"thead",{},[28,29,30,34,37],"tr",{},[31,32,33],"th",{},"你托管的",[31,35,36],{},"自动覆盖的申请写法",[31,38,39],{},"需要单独托管",[41,42,43,66],"tbody",{},[28,44,45,52,60],{},[46,47,48],"td",{},[49,50,51],"code",{},"example.com",[46,53,54,56,57],{},[49,55,51],{},"、",[49,58,59],{},"*.example.com",[46,61,62,65],{},[49,63,64],{},"a.b.example.com","(二级子域)",[28,67,68,73,80],{},[46,69,70],{},[49,71,72],{},"api.example.com",[46,74,75,56,77],{},[49,76,72],{},[49,78,79],{},"*.api.example.com",[46,81,82],{},"—",[10,84,85],{},"托管列表里每一行都会写明「自动解析覆盖 裸域 \u002F *.裸域」,不用记。",[87,88,91],"callout",{"title":89,"type":90},"为什么是这条规则","info",[10,92,93,94,97,98,101,102,104,105,107,108,110,111,114],{},"Let's Encrypt 校验 ",[49,95,96],{},"_acme-challenge.\u003C域名>"," 这一个点。裸域托管时,CNAME 加在 ",[49,99,100],{},"_acme-challenge.example.com"," 上,\n而 ",[49,103,59],{}," 的验证点恰好也是 ",[49,106,100],{},",所以一条记录天然覆盖两种写法;\n",[49,109,64],{}," 的验证点是 ",[49,112,113],{},"_acme-challenge.a.b.example.com",",不在托管记录覆盖范围内。",[18,116,117],{"id":117},"各场景的主机记录怎么填",[10,119,120],{},"CNAME 的主机记录取决于你托管的对象:",[22,122,123,139],{},[25,124,125],{},[28,126,127,130,136],{},[31,128,129],{},"托管对象",[31,131,132,133,135],{},"主机记录(控制台域名选 ",[49,134,51],{}," 时)",[31,137,138],{},"完整名称",[41,140,141,156],{},[28,142,143,147,152],{},[46,144,145],{},[49,146,51],{},[46,148,149],{},[49,150,151],{},"_acme-challenge",[46,153,154],{},[49,155,100],{},[28,157,158,162,167],{},[46,159,160],{},[49,161,72],{},[46,163,164],{},[49,165,166],{},"_acme-challenge.api",[46,168,169],{},[49,170,171],{},"_acme-challenge.api.example.com",[10,173,174],{},"拿不准就把指引弹窗里的「完整名称」整条照抄。",[18,176,177],{"id":177},"二级子域要单独托管",[10,179,180,181,183,184,186,187,190],{},"给 ",[49,182,64],{}," 申请证书时,需要在托管页单独添加 ",[49,185,64],{},",并按上表把 CNAME 加在 ",[49,188,189],{},"_acme-challenge.a.b"," 上。每多一层子域,就多一条独立的 CNAME。",[18,192,193],{"id":193},"泛域名的层级边界",[10,195,196,198,199,202,203,206,207,209],{},[49,197,59],{}," 覆盖的只有一级子域(",[49,200,201],{},"a.example.com","),",[14,204,205],{},"不包含","二级子域(",[49,208,64],{},")与裸域本身:",[211,212,213,223],"ul",{},[214,215,216,217,219,220,222],"li",{},"要给 ",[49,218,64],{}," 签发 → 单独托管 ",[49,221,64],{},"。",[214,224,225,226,228,229,231],{},"要给裸域 ",[49,227,51],{}," 签发 → 托管裸域后直接申请 ",[49,230,51],{}," 即可,两种写法都支持。",[10,233,234],{},"这与 Let's Encrypt 的通配符匹配规则一致,平台侧不做放宽。",{"title":236,"searchDepth":237,"depth":237,"links":238},"",3,[239,241,242,243],{"id":20,"depth":240,"text":20},2,{"id":117,"depth":240,"text":117},{"id":177,"depth":240,"text":177},{"id":193,"depth":240,"text":193},"域名托管的覆盖规则:托管裸域同时覆盖一级泛域名,二级及以上子域需要单独托管,以及各场景下主机记录怎么填。","md",{},true,"\u002Fdocs\u002Fdeleg\u002Fwildcard",{"title":5,"description":244},"docs\u002Fdeleg\u002Fwildcard","_2mrXGEK-kyq2GUY8SpThTw9d_VjJ6XuSFEfg0CYKks",1793537574522]