The main site is fine; one subdomain warns.
WHY
The certificate covers the domain and www but not that subdomain. Each subdomain needs coverage, either individually or through a wildcard.
FIXING IT
- cPanel > SSL/TLS Status.
- Find the subdomain and tick it.
- Run AutoSSL.
IF IT WILL NOT ISSUE
Does the subdomain exist in DNS and resolve to our server? Check with a lookup. If your DNS is at Cloudflare, creating the subdomain in cPanel does not create the DNS record. Add it there. Is it proxied? Set to DNS-only for validation. Is the subdomain excluded from AutoSSL? Check and include it.
FOR SUBDOMAINS POINTING ELSEWHERE
A subdomain pointing at another service does not need a certificate from us. That service supplies its own. Exclude it from AutoSSL to stop repeated failure notices.
AFTER CREATING ANY SUBDOMAIN
Run AutoSSL immediately rather than waiting for the scheduled run, and test the subdomain over https before giving anyone the address.