My domain universal SSL is pending for over two days

[alihussein]

Answer these questions to help the Community help you with Security questions.

What is the domain name?

moneyworld-sa.com

Have you searched for an answer?
yes, yet no clear information.

Please share your search results url:

When you tested your domain, what were the results?
two days ago

Describe the issue you are having:
my page not opening.

What error message or number are you receiving?

This site can’t provide a secure connection

moneyworld-sa.com uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH
What steps have you taken to resolve the issue?

1. pause cloudflare.

Was the site working with SSL prior to adding it to Cloudflare?
yes

What are the steps to reproduce the error:

Have you tried from another browser and/or incognito mode?
yes. 4 browsers

Please attach a screenshot of the error:

[sjr]

You have a DNSSEC issue…
https://cf.sjr.org.uk/tools/check?abfdc4ba64c24cc3821feedc8f89a267#dns

You need to either disable DNSSEC at your registrar, or enable it at Cloudflare and copy the DS records to your registrar from your dashboard here…
https://dash.cloudflare.com/?to=/:account/:zone/dns/settings

[alihussein]

the registrar dnssec settings looks like this

so i can’t disable it or put the ds records from cloudflare.
is there any solution?

[sjr]

Does the red “Remove DNSSEC” text do what it says when you click it?

[alihussein]

probably yes, but how to re-enable it again if i quit from cloudflare?. or shall I contact the registrar to enable it.

[Wanda]

If you move on from Cloudflare, you can manage the DNSSEC from your new name server provider or registrar.

[alihussein]

yes i want to make changes in cloudflare side, will you show me how to do so, thanks

[alihussein]

when i deleted dnssec, it gives me fields to fill as shown in screenshot.
shall i enable dnssec in cloudflare and fill the fields in the registrar with ds records of cloudflare???

[sjr]

@alihussein

shall i enable dnssec in cloudflare and fill the fields in the registrar with ds records of cloudflare???

Yes, if you can’t work out how to just turn it off at your registrar.

[alihussein]

sorry i forgot to upload the screenshot in the previous reply

[alihussein]

thanks for your quick response
i just deleted it and waited for over 4 hours, but nothing happened and my page still down.

[sdayman]

The Registry is still showing DNSSEC. You may have to wait a bit for that change to propagate.

[alihussein]

because i filled the registrar dnssec settings with ds records from cloudflare and enabled it in cloudflare as sjr said.