Suppose I cannot cannot host the AASA file on the root domain, how can I ensure the subdomain configuration includes the necessary details to handle the WebAuthn process.

{
"webcredentials": {
    "apps": [
        "*******.com.click.cas"
    ]
},
"webauthn": {
    "fido2": [
        {
            "rpId": "click.co",
            "origin": "https://froze.sit.click.co"
        }
    ]
}

}

. Is this correct ?