Hostname mismatch against the apex hostname


I can no longer access my app through https matching the apex hostname with the SSL certificate through a CDN.


Heroku recommends adding the custom domain (e.g., to your app and use

  • the DNS target as specified by the platform (e.g., as the origin host,
  • the custom domain for SNI,
  • match the custom domain with the SSL certificate on Heroku, and
  • use the custom domain for the Host request header.

Alternatively, it is possible to use the default domain (<appname> However, the apex hostname (without the subdomain) has been removed from the wild card certificate for * Heroku updated on June 1st, 2021.

Ask on Stack Overflow

Engage with a community of passionate experts to get the answers you need

Ask on Stack Overflow

Heroku Support

Create a support ticket and our support experts will get back to you

Contact Heroku Support