Auto SSL with Sub Domains as New Accounts

vlee

Well-Known Member
Oct 13, 2005
374
26
178
Spokane, Washington
cPanel Access Level
Root Administrator
I have had no problems in the past until now.

I normally create a new account off of my main domain as a sub domain example: new.abc.com to build new websites for people and Auto SSL adds a SSL to it.

But now it will not generate a SSL for the new sub domain account and stays in Pending Status even after 3 days and then I delete it and try again.

ERROR TLS Status: Defective
ERROR Defect: NO_SSL: No SSL certificate is installed.

Any ideas how to fix this?
 
Last edited:

anoopk350

Well-Known Member
May 6, 2020
73
9
8
Kochi
cPanel Access Level
Root Administrator
Possibilities for this issues are:

1. several requests for the certificate for one domain which have been rejected. Normally this occurs in instances where Comodo blocks certain keywords.
2. Certificate was being rejected due to Google's safe browsing check. When scanning the site google believes it has malware. If it's clean - which it does appear to be you may want to have google re-index it so it's removed from the list then provision the SSL certificate again.
 

vlee

Well-Known Member
Oct 13, 2005
374
26
178
Spokane, Washington
cPanel Access Level
Root Administrator
Possibilities for this issues are:

1. several requests for the certificate for one domain which have been rejected. Normally this occurs in instances where Comodo blocks certain keywords.
2. Certificate was being rejected due to Google's safe browsing check. When scanning the site google believes it has malware. If it's clean - which it does appear to be you may want to have google re-index it so it's removed from the list then provision the SSL certificate again.
This is my main domain for my business and just tried Let's Encrypt and it fails too .

I have checked Google and Comodo and it is not blacklisted and not blocked.

I even tried using a different domain and same thing

I even tried using a different subdomain domain and same thing

What I have been doing for years is this.

  • Home »Account Functions »Create a New Account use like this in the Domain field fly.domain.com
Then just fill out the rest of the fields like normal then click on create.

Then wait for 1 to 5 minutes for Auto SSL give fly.domain.com a SSL Certificate

Then done.



So something is not right.
 
Last edited by a moderator:

vlee

Well-Known Member
Oct 13, 2005
374
26
178
Spokane, Washington
cPanel Access Level
Root Administrator

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,297
1,251
313
Houston
@vlee

I am not sure I understand the issue you're experiencing here entirely. I have subdomains I created as accounts of their own which have no issue obtaining SSL certificates from AutoSSL and I am using PowerDNS.

To be sure,

- I created an account with a subdomain as the primary name lauren.mydomain.tld (I've changed the name here)
- Waited 5 minutes, then checked the AutoSSL logs
- Identified that the certificate order completed.
- Grabbed the Order Item ID from the logs, and checked our internal system to find that the status of the certificate within minutes was "Issued"
- Checked my site to ensure this had been installed.


The only thing I can think of is if the primary domain is using DNSSEC it isn't added/updated for the subdomain.
 

vlee

Well-Known Member
Oct 13, 2005
374
26
178
Spokane, Washington
cPanel Access Level
Root Administrator
The issue is that the DNSSEC on the primary domain and was not allowing subdomains to have Auto SSL added to them. I even turned off DNSSEC on one domain and still did not allow it that is when I submitted a ticket.

Then the other issue was I use cPanel DNS Only servers in clustered format it was having issues due to DNSSEC and subdomain as the primary name. At least according to cPanel tech support. in the ticket.

Power DNS is great but it does have some limitations like BIND has some too such as DNSSEC.

It will be a while for these issues to be worked out by cPanel so I just have to stick to BIND for now.