.app may be bought identical to another domain, but the related Web-site won't get the job done properly in browsers right until HTTPS has long been configured for the website. The root or apex subdomain. If you buy https://www.flor.app/