AutoSSL Fails - webdisk, cpcontacts and autodiscover.domain.com do not resolve to any ip address on the internet.

[ncdwight]

For some reason I cannot get SSL cert for webdisk, cpcontacts and autodiscover on my site. A records exist and point to the correct IP address but these three domains will not resolve. Hosted through bluehost. Any thoughts on how to resolve this?

 

[cPanelMary]

Hello ncdwight,

Before AutoSSL can deploy an SSL certificate, the domains must resolve. It's part of the system that makes sure that no one else can pretend to be your website and mislead your visitors. So before we can troubleshoot the AutoSSL certificate, we need to troubleshoot the DNS.

• Were the service subdomains that are having problems created with your account, or did you have to create them manually afterwards?
  • If you created them manually, how long ago did you create them?
• Is there IPv6 on the account?
• When you look at your nameservers at the registrar or do a whois lookup for your domain's information, does it show BlueHost's nameservers?

These questions are where I would start the troubleshooting process. If you post the answers, we'll be able to start the process of determining the issue.

Thank you for your cooperation! Regards,

 

[ncdwight]

Hi cPanelMary,

Thank you for your response. Here is what I have found.

• The subdomains having problems were created with my account.
  • I attempted removing them manually and re-adding them. At the point in time I contacted you it would have been approximately 8 hours prior.
• There is no IPv6
• The whois lookup returned google's name servers, despite both bluehost's and google's records pointing to the bluehost name servers.
  • I transitioned away from google approximately 96 hours ago now. I would expect these to have resolved.

So that's where we stand. All other records resolve correctly despite the NS mismatch.

Thanks again for your help.

 

[cPanelChris]

Hello @ncdwight .

It's possible that the WHOIS server could be lagging behind. I would recommend checking at the top-level domain name server directly. This can be done following the steps in the article linked below, or by using an online tool like intodns.

How to find out where a domain's DNS is hosted

If it still returns Google's name servers, you may what to check at the domain's registrar to ensure it's up to date with where DNS for the domain should be hosted.