Skip to main content

SSL problem with parked domain

Comments

7 comments

  • cPRex Jurassic Moderator

    Hey there!  It should give you more details near the first error where it talks about the DCV failure.  It's also a good idea to check the DNS for the domain with a tool like intodns.com because if there are *any* issues with the DNS the certificate will not get issued.

    0
  • Rogerio Vitiello

    Hi cPRex, there are some "No local authority" for the domain, because the DNS (SOA) and Website are in another server, but entries like "mail.example.com" are correct and pointing to the correct IP. All "Local HTTP DCV OK" showed are fine.

    I just cannot understand "CA authorized". It shows that it authorized for "*" (mask), but there's no mask entry in the DNS, that is not hosted in the local DNS server.

    0
  • cPRex Jurassic Moderator

    If you run this command from your server, replacing that last domain.com with your actual domain, do you get the expected nameservers in response?

    /usr/local/cpanel/3rdparty/bin/perl -MCpanel::DnsRoots -MData::Dumper -e 'print Dumper(Cpanel::DnsRoots->new()->get_nameservers_for_domain("domain.com"));'

    0
  • Rogerio Vitiello

    Yes, it shows the correct DNS servers and their IPs. But, as I said, they're outside of the cPanel server, that will be used only for email.

    0
  • cPRex Jurassic Moderator

    The location of the nameservers shouldn't matter at all - you could be using external or Cloudflare nameservers and I'd expect that to work fine.

    It might be best to submit a ticket so this can be investigated as it seems there is something else happening here.

    1
  • Rogerio Vitiello

    Ok, I'll do this soon, thanks!

    0
  • cPRex Jurassic Moderator

    Sure thing!

    0

Please sign in to leave a comment.