We have a bunch of domains on cloudflare, all of which have CF NS. This morning, I got a series of emails notifying me that:
Domain Control Validation (DCV) has failed for the certificate with the ID xxx-xxx-xxx belonging to Zone ID xxxxxxx. The DCV method is currently set to txt.
The message goes on to explain that I should make sure that the NS records are set to CF and that traffic is set to go through CF edge and that there’s no firewall rules on any of the zone IDs. The zone IDs themselves hold dummy domains that are not even used.
All Zone IDs have CF NS and there are no firewall rules whatsoever set on any Zone ID / Domain.
I checked the cert status using https://api.cloudflare.com/client/v4/zones/ZONE_ID/settings/ssl and all Zone IDs returned that
A few minutes later, I started getting messages for the same Zone IDs, notifying me that:
Certificate issuance has succeeded for the certificate with the ID xxx-xxx-xx belonging to Zone ID xxxx.
So… what happened here?