TechNestshop.example.com is a different name from example.com. A single-name certificate does not open it. A wildcard opens one level of subdomain. It is not enough for a second level.
Before you order, write down the name you will publish. A certificate bought for the wrong name does not show a lock on the right page. The card is on the certificate shelf.