Every domain on the account can have its own certificate.
ADDON DOMAINS
Treated as independent domains. Each needs to resolve to our server, then AutoSSL covers it and its subdomains.
After adding a domain and pointing its nameservers, run AutoSSL manually rather than waiting for the scheduled run.
ALIASES
A second domain showing the same site. These also need certificates, or visitors reaching the alias over https see a warning before any redirect takes effect.
Tick them on the SSL/TLS Status page and run AutoSSL.
THE COMMON OVERSIGHT
Setting up a redirect from an alias to the main domain, and not issuing a certificate for the alias. A visitor typing the alias with https gets a certificate warning and never reaches the redirect.
CHECKING EVERYTHING IS COVERED
SSL/TLS Status lists every domain and subdomain on the account with its certificate state. Anything without a padlock needs attention.
AFTER ADDING ANY DOMAIN
Point it, run AutoSSL, enable Force HTTPS, test both the bare and www forms.