Skip to main content

Auto SSL with Sub Domains as New Accounts

vlee
I have had no problems in the past until now. I normally create a new account off of my main domain as a sub domain example: new.abc.com to build new websites for people and Auto SSL adds a SSL to it. But now it will not generate a SSL for the new sub domain account and stays in Pending Status even after 3 days and then I delete it and try again. ERROR TLS Status: Defective ERROR Defect: NO_SSL: No SSL certificate is installed. Any ideas how to fix this?

Comments

6 comments

Date Votes
  • hmaddy
    Possibilities for this issues are: 1. several requests for the certificate for one domain which have been rejected. Normally this occurs in instances where Comodo blocks certain keywords. 2. Certificate was being rejected due to Google's safe browsing check. When scanning the site google believes it has malware. If it's clean - which it does appear to be you may want to have google re-index it so it's removed from the list then provision the SSL certificate again.
    0
  • vlee
    Possibilities for this issues are: 1. several requests for the certificate for one domain which have been rejected. Normally this occurs in instances where Comodo blocks certain keywords. 2. Certificate was being rejected due to Google's safe browsing check. When scanning the site google believes it has malware. If it's clean - which it does appear to be you may want to have google re-index it so it's removed from the list then provision the SSL certificate again.

    This is my main domain for my business and just tried Let's Encrypt and it fails too . I have checked Google and Comodo and it is not blacklisted and not blocked. I even tried using a different domain and same thing I even tried using a different subdomain domain and same thing What I have been doing for years is this.
    • Home "Account Functions "Create a New Account use like this in the Domain field fly.domain.com
    Then just fill out the rest of the fields like normal then click on create. Then wait for 1 to 5 minutes for Auto SSL give fly.domain.com a SSL Certificate Then done. So something is not right.
    0
  • vlee
    :( This is a shortcoming with using PowerDNS as it will not allow the subdomain to properly work with DNSSEC. Plus Auto SSL does not work with this above. But submitted a feature request
    0
  • cPanelLauren
    @vlee I am not sure I understand the issue you're experiencing here entirely. I have subdomains I created as accounts of their own which have no issue obtaining SSL certificates from AutoSSL and I am using PowerDNS. To be sure, - I created an account with a subdomain as the primary name lauren.mydomain.tld (I've changed the name here) - Waited 5 minutes, then checked the AutoSSL logs - Identified that the certificate order completed. - Grabbed the Order Item ID from the logs, and checked our internal system to find that the status of the certificate within minutes was "Issued" - Checked my site to ensure this had been installed. The only thing I can think of is if the primary domain is using DNSSEC it isn't added/updated for the subdomain.
    0
  • vlee
    The issue is that the DNSSEC on the primary domain and was not allowing subdomains to have Auto SSL added to them. I even turned off DNSSEC on one domain and still did not allow it that is when I submitted a ticket. Then the other issue was I use cPanel DNS Only servers in clustered format it was having issues due to DNSSEC and subdomain as the primary name. At least according to cPanel tech support. in the ticket. Power DNS is great but it does have some limitations like BIND has some too such as DNSSEC. It will be a while for these issues to be worked out by cPanel so I just have to stick to BIND for now.
    0
  • cPanelLauren
    Can you tell me the ticket ID number @vlee I'd like to look at the issue myself as well.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post