Unable to get Universal SSL Certificate

Website, Application, Performance Security
1

What is the name of the domain?

sortedlife.in

What is the error message?

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

What is the issue you’re encountering

Universal Certificate stuck on pending_validation

What steps have you taken to resolve the issue?

  1. Disabled/enabled universal SSL
  2. Unproxyied/proxyed domain
  3. Tried via API (Cloudflare API Documentation)
  4. Removed/re-added domain

The Universal Certificate is always stuck on “pending_validation”

Everything was fine till a couple of days back, now sure when it started. Also, other domains in the account are working fine

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

2

Your DNSSEC looks broken, which could very well lead to failing DNS lookups that prevent issuance of a certificate.

https://dnsviz.net/d/sortedlife.in/dnssec/

Best to disable DNSSEC at Cloudflare and your Registrar, then try again. Once that all is working, you can try setting up DNSSEC again.

3

Ok, I disabled DNSSEC on cloudflare as well as registrar.

Does it take time to take effect?
Also, could this be the cause of Universal SSL not being validated as well? Or there is something else wrong as well?

4

Working now. Thanks

1 Like
5

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.