AutoSSL issue addon domains

[pqpier]

Hello folks,

It's been happening (quite rarely, but still annoys) some issues regarding Auto SSL certificates for addon domains.

Some context:
my customers don't have access to their cpanel account directly, I'm managing everything through cPanel's and WHM API.

Lately I'm having some cases where customers approach my company's support and say SSL installation is taking too long for some domains.
When I open their cPanel account to check, I notice it's always addon domains and there is the following error on SSL/TLS status:

The installed certificate does not cover this domain. The certificate will renew via AutoSSL.

If I click on "show certificate", I see:

Certificate ID: another-addon-domain_website_primary_domain_site_d2703_8f8c1_1669521779_ac12a737634e5c1900d0219f03a3c81b
Domains:
addon-domain.site.primary-domain.site
another-addon-domain.website.primary-domain.site
yet-another-addon-domain.site.primary-domain.site
www.addon-domain.site.primary-domain.site
www.another-addon-domain.website.primary-domain.site
www.yet-another-addon-domain.site.primary-domain.site
Issuer: Let's Encrypt
Key: RSA, 2.048-bit (d270317b …)
Expires: 27/11/2022 04:03:00

If I click on show certificate for any of these three domains (addon-domain.site, another-addon-domain.site and yet-another-addon-domain.site),
all of them have this ssl error.

I've been solving the issue by removing the addon domain, adding it back, waiting a few hours and then running AutoSSL again.

Does anyone know why this might be happening and how to stop it?

 

[cPRex]

Hey there! If you check the AutoSSL logs on the account, are there any errors that might be helpful there that show why the original AutoSSL run didn't cover those particular domains?