Skip to content

Pending SSL Certificate request

0

How long does it take for a certificate to determine you are the owner of the domain? I have my DNS on a different company and I updated the cnames but I have no idea how long it takes or if there are further steps I have to do to have it check the DNS to confirm ownership?

asked 2 years ago321 views

3 Answers
1

Hi,

According to the documentation, it may take up to 72 hours for the validation to complete. However, in my experience it happens pretty much instantly, or at the most within 30 minutes.

If your domain validation has not completed within a reasonable time, then it is very likely that there is an error in the records you have created with your DNS host. Please double check the same and also check the documentation of your DNS host to ensure you are creating the records accurately.

All the best.

answered 2 years ago

EXPERT

reviewed 2 years ago

  • Interesting, it's been a couple days. If I update my DNS if there is something wrong, is that all I have to do or do I need to resubmit it or something?

  • If it is not done after two days, you need to cancel and recreate the request and the DNS records.

1

Most Certificate Authority's (CAs) will check for DNS propagation and verify domain ownership within minutes to a few hours after you've updated your DNS records. However, in some cases, it can take up to 24-72 hours for the verification to complete.

AWS

answered 2 years ago

EXPERT

reviewed 2 years ago

0

Hello,

Usually ACM Certificates are stuck in Pending Validation if the CNAME record is not added to the right DNS configuration. You can run the below command to check if the CNAME has been added in the correct DNS:

$ dig CNAME INSERT-YOUR-CNAME-RECORD-NAME +short

The command returns the CNAME record’s value in the output if the CNAME record was added to the correct DNS configuration and then propagated successfully. If it didn't return any value, it implies that the CNAME was not configured in your DNS hosted zone.

Next step is to check the NS records serving the domain :

$ dig +trace YOUR-DOMAIN-NAME

The CNAME records provided by ACM should be added to the DNS configuration where the last set of NS records provided in the above command's output are present.

These two troubleshooting steps should be able to resolve the issue.

answered 2 years ago

EXPERT

reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.