English

বাংলা
हिन्दी

English

বাংলা
हिन्दी

Appearance

SSL certificate not issued with Cloudflare ​

Symptoms ​

  • The hosting panel cannot issue the free SSL certificate for your domain.
  • The certificate request fails or stays pending for a long time.
  • Visitors see a certificate warning, or Cloudflare shows error 525 or 526.

Common causes ​

  • The domain does not point to your hosting yet, or the DNS change has not spread.
  • The Cloudflare proxy (orange cloud) is on while the certificate is requested for the first time.
  • A Cloudflare firewall rule, country block or Bot Fight Mode blocks /.well-known/acme-challenge/.
  • A CAA record at your DNS provider does not allow the certificate provider.
  • The www name has no record, so the certificate cannot be issued for it.

Safe initial checks ​

  1. Run dig A example.com +short and dig CNAME www.example.com +short, and compare the answers with Point your domain to hosting with web.apncloud.net.
  2. In Cloudflare, look at the Proxy status of the website records.
  3. List your CAA records. See CAA records.

Change one thing at a time and write down what you changed.

Step-by-step solutions ​

  1. DNS not pointing to hosting. Fix the records first and wait until the dig commands show the right answers.
  2. Proxy on. Set the website records to DNS only (grey cloud), request the certificate again and wait until the panel shows it as issued. Then turn the proxy on. See Cloudflare settings for APNCloud hosting.
  3. Blocked challenge path. Add a rule that allows /.well-known/acme-challenge/ before your other Security rules, or turn Bot Fight Mode off while you request the certificate.
  4. CAA records. If you have CAA records, make sure one of them allows the issuer that your hosting panel uses, or ask support which issuer that is.
  5. Missing www. Add the www record and request the certificate for both names.

How to confirm the issue is fixed ​

  • The hosting panel shows the certificate as issued for the domain and for www.
  • https://example.com and https://www.example.com open without a warning.

When to contact support ​

Contact support if the certificate is still not issued a few hours after the DNS records are correct and the proxy is off. Contact [SUPPORT_CONTACT].

Information to include in a support ticket ​

  • The domain name and the time of your last request.
  • The error text shown in the hosting panel.
  • The output of the two dig commands.
  • Whether the proxy was on or off and whether you have CAA records.

Last reviewed ​

2026-10-29