The service CName should be a valid unique FQDN, not already used and must match the DNS name in the service certificate. ...