In the Azure portal I'm trying to create an app managed certificate for a new domain.
I have successfully created top level naked certificates before without any issues.
This is the error
Properties.CanonicalName is invalid. Canonical name flexfitnessmount.co.nz is not a subdomain. This validation method only supports subdomains.
I think this error is not quite right as it's obvious that this is not a sub domain so I don't known why it is trying to use a validation method that only supports a sub domain in this case.
I wonder because it's .co.nz instead of .com it's getting confused and the extra part of the domain is causing it to think it should be validating a sub domain.