Nginx for Subdomain
server {
listen 80;
server_name blog.yourdomain.com;
root /var/www/blog;
}
SSL Certificate
certbot --nginx -d blog.yourdomain.com
💡 Wildcard cert *.domain.com covers all first-level subdomains but not nested ones like sub.blog.domain.com.