function subdomain ssl certs

The generated subdomain isn't getting a valid ssl cert, I was wondering if appwrite automatically generates one or uses a wildcard for *.functions.domain.com?

I tried adding a subdomain for comment-manage.jakehooper.pro this domain jakehooper.pro is where I also host appwrite with the console and api accessible at appwrite.jakehooper.pro. Is that going to cause any issue with the certs?

selfhosted, no nginx in front of appwrite

https://appwrite.io/docs/advanced/self-hosting/configuration/tls-certificates#manual-generation
I ran this to try to kick off a ssl job, not sure how long it takes

Do we have to add a cname record for every function?

Did you follow https://appwrite.io/docs/advanced/self-hosting/configuration/functions#automated-certificate-generation

it seems to be working now but I have to add each function domain to my dns with a cname record

i was just wondering if that is the only way, it won't verify a wildcard domain in the DNS

some of the cname records i have on my appwrite instance

so "message-send.functions.jakehooper.pro" wasn't validating in appwrite. I fiddled with it to get it to work, but probably not ideal with all the dns hops

No, please read the linked section

Did you set your function domain environment variable?