Hi there! I’m having trouble provisioning a Let’s Encrypt SSL certificate for one of our sites, and I’m not sure if the issue is with our DNS settings or Netlify.
The certificate works fine for the primary domain and www domain alias (www.shineassociates.com, shineassociates.com, and www.shineassociates.com), but fails on the apex of the domain alias (shineassociatesllc.com), with this error:
SniCertificate::CertificatelnvalidError: Unable to verify challenge for shineassociateslIc.com: Invalid response from http://shineassociatesllc.com/.well-known/acme-challenge/HGrM1QOPf3513uaps5dFk3uC5VnJdJgHyVZebYE2IN02607:f1c0:100f:f000::25e: 204
Here are the domain settings in Netlify:
shineassociates.netlify.app (Default subdomain) www.shineassociates.com (Primary domain) 👍 shineassociates.com (Redirects automatically to primary domain) 👍 www.shineassociatesllc.com (Domain alias) 👍 shineassociatesllc.com (Domain alias) 🚫 😢
And these are the DNS records:
shineassociates.com. A 188.8.131.52 www.shineassociates.com. CNAME shineassociates.com. shineassociatesllc.com. A 184.108.40.206 www.shineassociatesllc.com. A 220.127.116.11
shineassociatesllc.com domains are configured differently because they’re at separate registrars for legacy business reasons I hope to change soon. From everything I’ve read in Netlify’s docs though, it seems that using A records for both the www and apex domains records should work fine?)
I tried adding a
_redirects file as suggested here, but it doesn’t seem to make any difference:
http://www.shineassociatesllc.com/* https://www.shineassociates.com/:splat 302! https://www.shineassociatesllc.com/* https://www.shineassociates.com/:splat 302! http://shineassociatesllc.com/* https://www.shineassociates.com/:splat 302! https://shineassociatesllc.com/* https://www.shineassociates.com/:splat 302!
I can change DNS settings, but given the long feedback loop, I’m just trying to get a sense of what, if anything, I should be looking to change. I’ve been at this for a few days and am grasping at straws.
Thanks for any help!