NOTE: If other, similarly named sites exist with the difference in site name being a prefix (ex: join.mysite.com or trial.mysite.com) to the site to be protected (ex: mysite.com), to prevent these "prefixed" sites from being encompassed by the catch-all wildcard, rather than:
ServerAlias *.mysite.com
Please use this instead:
ServerAlias sb*.mysite.com
This will preserve the domains with the special prefixes so they still direct people to the correct pages.
See more information at https://www.bettercgi.com/strongbox/usage_requirements.html#wildcard