SSL for Custom Domain

Support
1

Hey,

Struggling with the SSL cert for my site: https://incandescent-bublanina-d04cb7.netlify.app/

I have added a custom domain (woodnott.com), which seems to be working if I ignore the security warning in Firefox. See below for the error:

*Web sites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for www.woodnott.com. The certificate is only valid for the following names: .netlify.app, netlify.app Error code: SSL_ERROR_BAD_CERT_DOMAIN

I’ve added a CAA record to the DNS host records in Namecheap: “letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/54403714” but no luck so far.

Any help gratefully recieved!

J

2

Your DNS is incorrectly configured:

dig A +short @8.8.8.8 woodnott.com

dig CNAME +short @8.8.8.8 www.woodnott.com
apex-loadbalancer.netlify.com.

You need an A record for woodnott.com with the value 75.2.60.5 and the CNAME for www should point to incandescent-bublanina-d04cb7.netlify.app.

3

Thanks - have updated but still no luck. How long would you reccomend waiting for updates to feed through?

Below are the DNS records…

DNS
DNS1136×261 5.59 KB

4

Hi @jpwoodi,

Thanks for following up.

Looks like the A Record is configured incorrectly:

host woodnott.com
woodnott.com mail is handled by 10 eforward1.registrar-servers.com.
woodnott.com mail is handled by 10 eforward2.registrar-servers.com.
woodnott.com mail is handled by 10 eforward3.registrar-servers.com.
woodnott.com mail is handled by 15 eforward4.registrar-servers.com.
woodnott.com mail is handled by 20 eforward5.registrar-servers.com.

I’m not seeing the IP address 75.2.60.5

Or here: DNS Propagation Checker - Global DNS Testing Tool

The Host for the A Record should be @ instead of www.

You can follow our Support Guide here:

You can read about propagation here: