ssl DSN validation is pending forever
I have purchased and am managing a domain name through GoDaddy (readover.online). The primary domain is directed to my VPS on GoDaddy. I have also established a record for a subdomain (english.myDomain.com), directing it to my AWS EC2 Beanstalk website. I am successfully able to access my website (english.readover,online) hosted on AWS.
Currently, I am in the process of setting up an SSL certificate. I chose DNS validation since I have access to the domain's DNS records. I received a key value to create a new CNAME record for validation, and I have added this record. The status of the validation process is "Pending validation" since yesterday morning.
How can I fix it?
- Newest
- Most votes
- Most comments
Based on your screen shot I think I see the issue.
The CNAME for the certificate has the full domain in the record. You’ll find the dns record will look something like
_hdjejdjdjdjdjdj.english.readover.online.readover.online
Because the domain is automatically appended you will not need it as part of the CNAME.
Try to remove .readover.online from the CNAME record.
If that doesn’t work, you will likely need a one of 2 things.
- An English subdomain setting up with its own zone
- create a certificate in readover.online and add an alias to the certificate english. This will mean the certificate is in the root domain and not subdomain
Could you share screenshots of your DNS records removing any sensitive information as first thought is that they are not configured correctly
Have you tried performing an nslookup on the DNS records to ensure they resolve?
I added a screenshot. my domain and sub domain point to the correct place. my domain point to my storage on godaddy storage. my subdomain points to my aws storage.
you wrote: Try to remove .readover.online from the CNAME record. I inserted exactly what I got from the certificate manger. do I have to change it in the certificate manager or just in the record?
Just the record.
Relevant content
- asked 4 years ago
- asked 7 months ago
AWS OFFICIALUpdated 2 years ago- AWS OFFICIALUpdated 2 years ago
Did that resolve your issue?
I used your first advice to delete from the record name .redover.online and it works great!
Perfect thanks great to hear.