only root domain in CNAME