"Potential reduced AutoSSL coverage" email every 3 hours

[mvandemar]

I set up a subdomain on its own cpanel, and am getting warnings from WHM now that there is potentially reduced coverages since the www.subdomain.domain.com and mail.subdomain.domain.com don't actually resolve. This is normal and expected due to the way I set this up (the subdomain entries were manually added in the primary cpanel for this domain). The issue is that since these warnings started yesterday, I am now getting them every 3 hours, and I have no clue why it would default to that. The cert doesn't even expire for another 11 days, which means the system is planning on sending me 88 more reminder emails for this issue.

I do not want to kill this classification of notice (“AutoSSL has deferred normal certificate renewal because a domain on the current certificate has failed DCV (Domain Control Validation).”), since that's actually something I should be alerted to under normal circumstances, I just see zero point of getting it 8 times per day. Any way to fix this? Is it really supposed to be this frequent?

-Michael

 

[cPRex]

Hey there! We start checking for renewals two weeks before the SSL expires.

The best way to resolve this is to go to cPanel >> SSL/TLS Status and click the "Exclude from AutoSSL" button on that page so the system doesn't try and add those subdomains that will never work. Then the certificate will renew what it can and you'll stop receiving those notices.

 

[mvandemar]

Hey there! We start checking for renewals two weeks before the SSL expires.

The best way to resolve this is to go to cPanel >> SSL/TLS Status and click the "Exclude from AutoSSL" button on that page so the system doesn't try and add those subdomains that will never work. Then the certificate will renew what it can and you'll stop receiving those notices.

Thanks, I manually excluded those two domains.

For real though, it sounds like notifications 8 times a day is intentional then? Any idea why? Does that actually seem like a reasonable thing to do for potentially 2 weeks? Are there any other notifications set to that frequency, and is that something that can be tweaked?

-Michael

 

[cPRex]

The 8 times number doesn't sound right to me. Usually it's a once or twice per day message, depending on the status of the certificate. For that, it might be best if we had access to the machine so we could check the server settings directly and see what the problem may be. If you do submit a ticket, please post the number here so I can follow along and keep this thread updated.