Not generating SSL certifications for custom/imported domain from other domain provider

Adding custom domains, the ssl certifications are generated with * and not with *

❯ curl -s -v

  • Trying ip…
  • Connected to (IP) port 443 (#0)
  • ALPN, offering h2
  • ALPN, offering http/1.1
  • successfully set certificate verify locations:
  • CAfile: /etc/ssl/cert.pem
    CApath: none
  • TLSv1.2 (OUT), TLS handshake, Client hello (1):
  • TLSv1.2 (IN), TLS handshake, Server hello (2):
  • TLSv1.2 (IN), TLS handshake, Certificate (11):
  • TLSv1.2 (IN), TLS handshake, Server key exchange (12):
  • TLSv1.2 (IN), TLS handshake, Server finished (14):
  • TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
  • TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
  • TLSv1.2 (OUT), TLS handshake, Finished (20):
  • TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
  • TLSv1.2 (IN), TLS handshake, Finished (20):
  • SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
  • ALPN, server accepted to use h2
  • Server certificate:
  • subject: C=US; ST=ca; L=San Francisco; O=Netlify, Inc; CN=*
  • start date: Jul 3 00:00:00 2019 GMT
  • expire date: Jul 7 12:00:00 2020 GMT
  • subjectAltName does not match
  • SSL: no alternative certificate subject name matches target host name ‘
  • Closing connection 0
  • TLSv1.2 (OUT), TLS alert, close notify (256):

Also I got an error:

Could you help me please?

hi there, the first step is for us to know which netlify site this is regarding, and also which custom domain you are trying to add. We can’t look up dns records for placeholder domains :slight_smile:

Sure! :slight_smile: &

Hey there,

Your site isn’t being served by Netlify just yet. You need to complete the configuration as advised by the UI:

Once this is complete, the cert should provision.

I already added 2 weeks ago:

Anything wrong?



So I’m not too familiar with your registrar but, for some reason, we’re not happy with the config for the non-www domain. Plus, two weeks is plenty of time for propagation. Perhaps you don’t need the config twice – try removing the NS records for the www domain :+1: