diff --git a/agent/app/service/website_ssl.go b/agent/app/service/website_ssl.go
index 4eb3d4c0f..5439b2dbd 100644
--- a/agent/app/service/website_ssl.go
+++ b/agent/app/service/website_ssl.go
@@ -524,7 +524,7 @@ func (w WebsiteSSLService) Update(update request.WebsiteSSLUpdate) error {
 	if update.OtherDomains != "" {
 		otherDomainArray := strings.Split(update.OtherDomains, "\n")
 		for _, domain := range otherDomainArray {
-			if !common.IsValidDomain(domain) {
+			if websiteSSL.Provider != constant.SelfSigned && !common.IsValidDomain(domain) {
 				return buserr.WithName("ErrDomainFormat", domain)
 			}
 			domains = append(domains, domain)
diff --git a/frontend/src/views/website/ssl/create/index.vue b/frontend/src/views/website/ssl/create/index.vue
index 9ea7d6624..c3195e106 100644
--- a/frontend/src/views/website/ssl/create/index.vue
+++ b/frontend/src/views/website/ssl/create/index.vue
@@ -268,6 +268,9 @@ const acceptParams = (op: string, websiteSSL: Website.SSLDTO) => {
         ssl.value.keyType = websiteSSL.keyType;
         ssl.value.execShell = websiteSSL.execShell;
         ssl.value.shell = websiteSSL.shell;
+        if (ssl.value.provider == 'selfSigned') {
+            rules.value.primaryDomain = [];
+        }
     }
     ssl.value.websiteId = Number(id.value);
     getAcmeAccounts();