Symptoms
Your server has requested an SSL certificate via AutoSSL through the Sectigo SSL provider but has not yet issued the certificate. Everything on the server appears to be set up correctly, but it is unclear what is going on?
Description
Please note, that according to Sectigo, DV validation certificates could take anywhere from a few minutes up to 1 business day to issue.
https://sectigostore.com/ssl-support/faqs
You can check the status of the AutoSSL order periodically to see if the certificate has been issued with help from the following article, the server automatically does this periodically.
How to check the AutoSSL queue for certificates that have already been submitted.
Please note, repeated running the command in the article below can cause the Sectigo services to stop responding to your requests, so running the command sparingly is recommended.
If the SSL is for your hostname, the following command will allow you to review the status of the certificate.
When does checkallsslcerts actually replace my certificate?
Install the free SSL Certificate on the server's hostname
In the meantime, here are a few articles that may be able to help to prevent common issues that would cause delays in the validation process:
- Check to make sure that your firewall has all of the Sectigo IP addresses added to it. This ensures Sectigo can access the DCV check file it uses during the verification process.
Why are my AutoSSL certificates stuck in the pending queue?
- Ensure that the domains the certificate will cover are resolvable from the outside world via DNS.
Can I Change the Common Name on an AutoSSL Certificate?
- Ensure that the AutoSSL service submitted the request sometimes; if the domain is being "resolved" by the nameserver on your server, it might not be accessible from other parts of the world, resulting in timeouts during AutoSSL checks.