try only top-level doamin in the CNAME