I see, so cloudflare isn't able to issue sub-sub certs without paying extra for it. Is it possible to run netmaker without the subdomain? I assume so. i.e.

dashboard.example.com
api.example.com

vs

dashboard.nm.example.com
api.nm.example.com

I'd like to keep the cloudflare proxy enabled, I restrict all incoming traffic to only cloudflare's servers for obvious reasons.