It’s not really an “alias” but a redirect. And you need to properly configure a redirect, which includes having a certificate in place for the place the redirect lives.
For example, our partners at communiteq provide a service for that at https://www.forcewww.com/