Main issue: After moving a domain and hosting from Google to Shopify, the domain showed “SSL Pending” and “Your domain has an unsupported DNSSEC record.” DNSSEC (Domain Name System Security Extensions) can block proper DNS validation if not supported.
Key details provided:
User had reset DNS but couldn’t locate/remove the DNSSEC record.
Recommended Shopify DNS setup shared: A record [email removed] → 23.227.38.65 and CNAME (www) → shops.myshopify.com. Only one A [email removed] and one CNAME www should exist.
User’s DNS showed one A record pointing to 23.227.38.69 and a CNAME for www to shops.myshopify.com. The dashboard still displayed SSL pending and DNSSEC unsupported.
Resolution/outcome:
Shopify authenticated support manually removed the DNSSEC record.
Site went live immediately after removal. Issue resolved.
Status: Resolved. No further action needed beyond ensuring DNS matches Shopify’s recommended records and confirming DNSSEC is disabled for the domain on Shopify.
A few days ago, I ported my domain to Shopify in anticipation of my upcoming site launch. In Shopify, the domain is reflecting these two errors: “SSL Pending” and “Your Domain has an unsupported DNSSEC record”.
So far, I have reset the DNS and attempted to find the errant DNSSEC record to no avail.
I’d be happy to help you with this! To clarify, did you move your domain hosting to Shopify or did you update the DNS information so that it points to your new Shopify store?
You can have only one A [email removed] record and one www CNAME record associated with your domain. If your domain already has an A [email removed] record or www CNAME record, then you need to change these records to point to Shopify. You can have multiple CNAME records associated with your domain, but each one must have a unique name, such as www or shop.
Our authenticated support team would be happy to review your domain setup with you as well. To access our authenticated support, please follow this link: Shopify Help Center.
Thanks for your attention on this Shay. I was able to chat with dedicated support. They were able to manually remove the DNSSEC record and push my site live. It’s LIVE. WOOHOO!!!