tracking domain's certificate

Hello community,

we are facing with the issue that when Creatio sends the email, it substitute one more subdomain for tracking purposes. So, for instance,if the original link is

https://domain/address

then Creatio changes it to

https://tracking.domain/address

And if one clicks on the link, he or she gets the warning, that the transition to the untrusted site is blocked. How to resolve the issue? Should we issue the separate certificate for tracking.domain? Or somehow else?