diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 0fe6c0610..bd429ab68 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -230,6 +230,8 @@ function getAcmeCertificateNameSync(fqdn, domainObject) {
 
     if (fqdn !== domainObject.domain && domainObject.tlsConfig.wildcard) { // bare domain is not part of wildcard SAN
         return dns.makeWildcard(fqdn).replace('*.', '_.');
+    } else if (fqdn.includes('*')) { // alias domain with non-wildcard cert
+        return fqdn.replace('*.', '_.');
     } else {
         return fqdn;
     }