Cloudflare cannot be enabled while the SSL certificate is not verified

[biswarupsr]

Hello, I am unable to enable Cloudflare for my website viniyogindia.com. I use hostinger.in for hosting, and GoDaddy is the domain registrar.

I had ordered Cloudflare through hostinger about 10 days back, but it could not be enabled yet.

I get the following error while trying to enable Cloudflare using hosting c-panel:

Earlier, I had reached out to hostinger support, and they advised me to do the following:

1. Log in to Cloudflare a/c and execute steps 2 - 4
2. Disable edge certificates
3. Wait for 10 mins, & re-enable
4. Purge cache
5. Try enabling Cloudflare from c-panel.

I tried doing this twice, but to no effect.

Note, the status of the edge certificates for both viniyogindia.com & www subdomain is “Pending Issuance (Error)”:

Hostinger support has now advised me to reach out to Cloudflare directly, and let you know that my “domain has pending_issuance status”

Appreciate any help, thanks!

[domjh]

Hi @biswarupsr,

Partner setups can be difficult for us to troubleshoot on the community, so I checked and @cf_evan had a look and was able to provide a lot of useful info.

It looks like your domain currently has CAA records that limit the certificate authorities able to issue certs for your domain.

$ dig viniyogindia.com caa +short
0 issue "comodoca.com"
0 issuewild "letsencrypt.org"
0 issue "letsencrypt.org"

Most of Cloudflare’s Universal Certificates are issued by DigiCert. You will likely need to either add them to your CAA record or remove that record. You may want to pass this information back to Hostinger if you are unsure how to do this yourself.

The documentation on the required CAA records can be found here → Troubleshooting Cloudflare for SaaS · Cloudflare for Platforms docs

If you’re still having problems after doing that, just let us know.

[biswarupsr]

Thank you so much @domjh ! Pending issuance error is gone now, really appreciate the help!!