Enable SSL Universal Certificate

What is the name of the domain?

olmfoods.com

What is the issue you’re encountering

Our Universal SSL cert disappeared. Now the backup cert has not automatically deployed. How do I deploy the backup cert or get my universal cert back?

What steps have you taken to resolve the issue?

I disabled SSL certificates but now cannot re-enable SSL certificates. I get the error “incorrect password reset code”

When you disable Universal SSL, Cloudflare will delete the certificate. If you enable Universal SSL again later on, you have to wait a while for a new certificate to be issued.

I suggest you wait a few hours and check back.

Could you try just pausing Cloudflare? :thinking:

  • Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
  • The link is in the lower right corner of that page.

Otherwise, maybe by turning off all proxying, switch from :orange: to :grey: (DNS-only), wait for an hour and switch back proxy to :orange: for your DNS records.

@fritex , I will try to pause cloudflare. the Universal cert disappeared before I disabled Univeral certifications. Not sure how that happened. All of our other domains are okay except for this one. I also get this error. Can I manually deploye the backup certificate somehow?

Seems Cloudflare cannot issue the Universal SSL certificate, neither Backup could be deployed since your domain isn’t using Cloudflare nameservers anymore at your domain registrar:

Name Server: CFDNS1.PFGC.COM
Name Server: CFDNS2.PFGC.COM

Are you sure you’re using brad.ns.cloudflare.com and vera.ns.cloudflare.com as domain nameservers and not NS type of the DNS records? :thinking:

See here:

And also A or CNAME olmfoods.com is now unproxied :grey: (DNS-only). To get Universal SSL certificate, after you’ve cross-check your domain registrar and nameservers, switch them to proxied :orange: .

I am afraid not quite, rather they’re automatically deployed for domains using Cloudflare nameservers and proxied :orange: DNS records as follows:

Does not appear that is the case everywhere, appears they are propagating DNS Propagation Checker - Global DNS Testing Tool

It looks like they went missing for a couple of days, https://securitytrails.com/domain/olmfoods.com/history/ns

@madison.roets you should contact your registrar to see if DNSSEC is active on your account, if it is, have them disable it.

1 Like

@cloonan and @fritex. I purchase the Business plan for olmfoods.com. We want to add pfgns1.pfgc.com as a custom name server. How do we attempt this? When I type in pfgns1.pfgc.com in the “add custom nameserver” it automatically returns pfgns1.pfgc.com.olmfoods.com

It sounds like you will want to use account level custom name servers instead of zone level:

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.