Edge SSL Certificates pending validation (Even after changing the Domain Registrar))

[seopirates]

Answer these questions to help the Community help you with Security questions.

What is the domain name?
Hidden

Have you searched for an answer?
I checked many answers, but none worked. They have almost the same 2-3 answers.

Please share your search results url:

Edge SSL Certificates stuck on pending validation

Since Dec. 2nd been having issue with one of my site SSL. I check Cloudflare forum about this but it seems can’t find a solution. I saw some says disable universal ssl, I did this “disable universal ssl” for 30 minutes then enable no go. tried disabling universal ssl for 1 day then enable it and still no go. Still pending validation. any help? thanks.

SSL Certificates Pending Validation

In the SSL/TLS >> Edge Certificates section I am getting Pending Validation (HTTP) for my host name. I have tried Disabling the Universal SSL for 5 minutes as suggested before, but it still displays the same status. Has anyone else had this problem? It has been more than 24 hours since I first activated my CloudFlare. Thanks.

Edge certificate pending validation

I cant issue edge certificate it stays pending validation and it stuck tried to stop ssl and renew it but it doesn’t work. Than My redirect doesnt work

When you tested your domain, what were the results?
It’s been showing same SSL error for a few months.

Describe the issue you are having:
The SSL certificate section always shows pending validation, even after changing domain registrar.

What error message or number are you receiving?
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

What steps have you taken to resolve the issue?

1. Disabling/Enabling global SSL,
2. The domain registrar changed,
3. CF account change or tried with different CF nameservers.

Was the site working with SSL prior to adding it to Cloudflare?
Yes.

What are the steps to reproduce the error:

1. Just visit [Hidden]

Have you tried from another browser and/or incognito mode?
yes.

Please attach a screenshot of the error:

[Chaika]

Thanks for including your domain name!

https://dnsviz.net/d/redacted/dnssec/

; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for redacted.com.)

Your DNSSEC Configuration is broken.

It looks like you had DNSSEC Set up at your old DNS Host. Not all DNS Resolvers validate DNSSEC, some ISP-operated Resolvers don’t, but most Public ones and Certificate Providers do, which will prevent them from resolving your site/issuing a certificate.

You’ll want to either outright disable DNSSEC, or enable DNSSEC with Cloudflare and update your DNSSEC configuration with the information Cloudflare gives you:

DNSSEC · Cloudflare DNS docs

These changes to your DNSSEC Configuration can be done at your Registrar, Sav.com.

After you make these changes to fix your DNSSEC Configuriation, the certificate issuance should retry after a bit and succeed. You can use the dnsviz.net site and click “Update Now” to confirm you fixed the issue, no “BOGUS” status/notices should appear.

[seopirates]

It worked. Thanks

Please remove the mention of my domain name from your answer. [its mentioned 2 times]

It starts showing here and there, like on Google results.

[seopirates]

@Chaika

Please remove the domain’s mention from the answer above.