Both of those methods provide a letsencrypt certificate for the second (sub)domain. Adding the extra info to your app.yml covers both domain addresses in the same certificate, and forcewww.com has some special magic that does it on the fly so you don’t have to worry about it: