AutoSSL Error (Verify registration and authoritative nameserver configuration for this domain or to correct this problem.)

[ionline_pty_ltd]

Hi there,
We are experiencing some problems with the auto provisioning of SSLs on some of our hosting accounts. See output below. We manage all our own DNS in multiple DNSOnly nameservers.
~

Log for the AutoSSL run for "hosting_account_name": Monday, January 18, 2021 10:03:34 AM GMT+1000 (cPanel (powered by Sectigo))
10:03:34 AM AutoSSL’s configured provider is “cPanel (powered by Sectigo)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
Analyzing "hosting_account_name"’s domains …
10:03:34 AM Analyzing “domain_name.com.au” (website) …
10:03:34 AM ERROR TLS Status: Defective
ERROR Certificate expiry: 9/7/20, 12:00 AM UTC (133 days ago)
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED).
10:03:34 AM Attempting to ensure the existence of necessary CAA records …
10:03:36 AM No CAA records were created.
10:03:36 AM Verifying 8 domains’ management status …
Verifying “cPanel (powered by Sectigo)”’s authorization on 8 domains via DNS CAA records …
WARN DNS query error (webdisk.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (webmail.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpcalendars.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpanel.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (www.domain_name.com.au/CAA): SERVFAIL (2)
WARN DNS query error (www.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpcontacts.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (domain_name.com.au/NS): SERVFAIL (2)
10:03:36 AM ERROR “www.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “cpanel.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “webdisk.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “webmail.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “cpcontacts.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “cpcalendars.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
ERROR “domain_name.com.au” is unmanaged. Verify this domain’s registration and authoritative nameserver configuration to correct this problem.
10:03:36 AM WARN DNS query error (mail.domain_name.com.au/NS): SERVFAIL (2)
10:03:36 AM ERROR “mail.domain_name.com.au” is unmanaged. Verify registration and authoritative nameserver configuration for this domain or “domain_name.com.au” to correct this problem.
AutoSSL cannot confirm management status for any of this user’s 8 domains are unmanaged.AutoSSL cannot secure any domain without confirming its management status.
10:03:36 AM WARN DNS query error (domain_name.com.au/CAA): SERVFAIL (2)
10:03:36 AM CA authorized: “domain_name.com.au”
CA authorized: “www.domain_name.com.au”
10:03:37 AM WARN DNS query error (cpanel.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “cpanel.domain_name.com.au”
10:03:37 AM WARN DNS query error (cpcontacts.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “cpcontacts.domain_name.com.au”
10:03:37 AM WARN DNS query error (webdisk.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “webdisk.domain_name.com.au”
10:03:37 AM WARN DNS query error (cpcalendars.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “cpcalendars.domain_name.com.au”
10:03:37 AM WARN DNS query error (webmail.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “webmail.domain_name.com.au”
10:03:37 AM WARN DNS query error (mail.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: “mail.domain_name.com.au”
“cPanel (powered by Sectigo)” is authorized to issue certificates for 8 of this user’s 8 domains.
10:03:37 AM AutoSSL cannot increase "hosting_account_name"’s SSL coverage.
~

Lots of similar threads on this one - I have tried the following

###
for i in {a..m}; do echo -n "$i.root-servers.net: "; dig -4 "$i".root-servers.net @"$i".root-servers.net +short;done
###

~~
a.root-servers.net: 198.41.0.4
b.root-servers.net: 199.9.14.201
c.root-servers.net: 192.33.4.12
d.root-servers.net: 199.7.91.13
e.root-servers.net: 192.203.230.10
f.root-servers.net: 192.5.5.241
g.root-servers.net: 192.112.36.4
h.root-servers.net: 198.97.190.53
i.root-servers.net: 192.36.148.17
j.root-servers.net: 192.58.128.30
k.root-servers.net: 193.0.14.129
l.root-servers.net: 199.7.83.42
m.root-servers.net: 202.12.27.33
~~

Can anyone assist please?
Thanks

 

[cPJustinD]

Hey there! We may need to take a closer look at the specific domain affected as well as the server. Would you mind opening a support ticket at tickets.cpanel.net, please?

 

[ionline_pty_ltd]

will do

 

[ionline_pty_ltd]

will do, can you close this thread and I will communicate on the ticket

 

[cPRex]

@ionline_pty_ltd - if you can share the ticket number here I can follow along and keep the community updated with our findings.

 

[kujawat]

@ionline_pty_ltd - if you can share the ticket number here I can follow along and keep the community updated with our findings.

did we ever find out what happened here?? I'm having the same issues on a new server recently deployed...

 

[cPRex]

Since there wasn't a reply to the earlier message, I don't know of a resolution for this specific issue. Could you post your AutoSSL errors, just making sure to remove the public information like domains or IP addresses?