Hey @Siteme,
Branch subdomains without Netlify DNS require your primary custom domain to be www.domain.com, with domain.com redirecting to that. Then, you would create a CNAME, at that point, we could extend a certificate for you. This article explains it all:
Let us know when those changes are made and we’ll get you that certificate
