SSL issuance and DNS are closely related. AutoSSL can only validate hostnames that meet the certificate provider's validation requirements.
Before troubleshooting AutoSSL
- Confirm the domain uses the intended authoritative nameservers.
- Confirm the hostname resolves to the expected hosting destination.
- Check for stale A or AAAA records.
- Review CAA records if certificate issuance is unexpectedly denied.
- Allow recent DNS changes time to propagate according to their TTL.
Do not replace a working certificate simply because DNS is still propagating. Fix DNS first and then rerun AutoSSL when appropriate.
