Certificates cover specific DNS hostnames. The root domain, www, and other subdomains are separate names unless the certificate includes them.
Before troubleshooting a certificate, identify the exact hostname in use. A site can work securely at example.com while shop.example.com remains unsecured if that subdomain is not covered.
Use SSL/TLS Status to review each hosted hostname individually rather than assuming one certificate automatically covers every possible subdomain.
