using naked domain for CNAME