I’ve noticed for the last week that my domain is SSL pending. I have not launched yet and I didn’t have it before at all just from this last week. What should I do and what does it mean?
Thanks
Hi, @Uza ,
Hank here from Shopify.
The most common reason that your SSL is still pending is due to what is known as domain propagation which can take up to 72 hours to update across servers worldwide, although it is normally resolved within a few hours. However, when it goes outside of this, it is usually down to the DNS settings when connecting your domain.
When a domain is purchased from within Shopify, your DNS records are automatically set, but I will share below the steps of how to connect your domain.
The most important thing to note is to ensure that there are not multiple A records associated. You will need to ensure that only one A record is associated as this will have a direct effect on your SSL certificate. I will share a snippet from the guide below for ease of access!
Can you share your URL, and I can check the DNS settings? Note that once you make any changes to the URL, it can take up to 72 hours as previously mentioned.
Let me know if you have any further questions!
Hank
3 Likes
Hi Hank,
Thank you for your help I’m sharing my URL here: https://bambu-bottle.com/
From what I can see the DNS settings has only one A but maybe I’m wrong..?
Thanks
1 Like
Thank you for the screenshots, and for sharing your URL.
After taking a look at your domain URL using this website, I can now see the issue.
The issue is you have multiple A records, but one is linked incorrectly, which is causing an issue with your subdomain (www).
To remove this option, you will need to edit the DNS settings within your Shopify managed domain. Within your admin, click on Online store > Domains > Manage > DNS settings.
Can you take a look at this section, remove that record above, and let me know how you get on.
1 Like
Yes I can see now the the SSL Pending is gone.
Thank you very much for your help!
Enjoy your weekend and stay safe 
That is awesome to hear, you are very welcome, my friend!
Do reach back out to us if you need anything, stay safe, and have an awesome weekend!
Hello,
I am a having the same problem with ‘SSL pending’
I successfully connect my domain on Monday Oct 19 (Sydney AUST time) and as at Thursday still pending
My A record is the only one point at: 23.227.38.65
www.jojobloom.com CNAME points at shops.myshopify.com
I am reasonably tech and web literate but I have never experienced such a long period of propagation.
Is there any other likely cause?
Mark
Thank you for reaching out about this, Mark.
I took a look at your domain using this website and I see what the issue is.
You have two values for the A record, so this is causing the issue with the SSL certificate.
Can you remove the highlighted version below? Once you do this, your certificate will reissue for you.
Hi @Hank !
I’m having the same issue with SSL Pending. We host through GoDaddy for our Shopify butchergirls.co, and added a subdomain for our second Shopify store (la.butchergirls.co) successfully. The SSL went through quickly!
Now, with ny.butchergirls.co, the SSL still says Pending but the DNS settings look correct to me. Obviously our customers can’t check out in the meanwhile. Can you help?
Thanks for reaching out about this, @j_butchergirls , and also for sharing your store URL(s), this was very helpful!
I took a look at all three of the links you shared, and while the CNAME records look good, there is an issue with the A Record on all three domains. I have taken a screenshot showing which value needs to be amended which I will share below.
Once you make the changes, it can take up to 72 hours for domain propagation but as you have the domain already active, it should not take that long, but let me know how you get on!
Thanks for reaching out about this, @j_butchergirls , and also for sharing your store URL(s), this was very helpful!
I took a look at all three of the links you shared, and while the CNAME records look good, there is an issue with the A Record on all three domains. I have taken a screenshot showing which value needs to be amended which I will share below.
Once you make the changes, it can take up to 72 hours for domain propagation but as you have the domain already active, it should not take that long, but let me know how you get on!
Hey @Hank !
Thanks for looking into this and being so thorough! I can’t seem to find those A records. Here’s a screenshot of our DNS settings within GoDaddy. Could there be somewhere else we need to be looking?
That certainly seems strange. I used this website to view your DNS settings, but are those the DNS settings for all three of your domains you listed?
Or is there a separate subsection within your GoDaddy page?
hey frank, Thanks for helping us out. My shop name is www.shoppublichardware.com through google domains. On Friday I set up the domain and there was an option to let shopify set all the options, I did that. today is Monday and I am still in SSL pending
I think I have checked this thread to see the answers. I SEE that I have two of the “a” types online. but when I go to the dns link in google domains I do not see the option to delete them… this is all I see (see attachment)
1 Like
Thanks for reaching out about this, @Buttercup83 .
I can see what might be the cause, but once I clicked on your URL, it brought me to a page advising the domain had expired, did you recently purchase or renew the domain?
However, once I checked the web address on this site, it showed me multiple A records, which would be the root cause of a pending SSL cert. I will advise of the correct values to be input below.
Now as you stated, you can see this online, but not in the field itself, and are having an issue connecting your third-party domain. The DNS records should be located within the hosting panel, although as mentioned the link above advised me the domain was expired, so I would advise reaching out to Google Domains directly. Simply advise them of what you require, and they should be able to show you how this is done on their end.
Once you edit the DNS records, allow 24-72 hours for the domain propagation to complete, and you should see the SSL certificate issued.
Let me know how you get on, or if you have any additional questions!
1 Like
I talked to the lady at google domains, She had me delete all the AAA and told them they were conflicting, so in 48 hours I will have my answer
1 Like
That sounds awesome!
I would advise you to edit the A record as mentioned above, but doing all of this will cause the SSL certificate to be reissued for you.
Let me know once the A record has been changed, and if you need further assistance.
Hi Hank, I’m in the same boat. My domain is aaaaautomotive.com, managed by GoDaddy.
I have the same problem as others on this thread. I checked on GoDaddy and there was an extra A record (sitetesting.aaaaautomotive.com) which I removed. I am left with 2 A records- [email removed] and mobile. Please see attached screenshots from Shopify and GoDaddy.
Is there something I need to do in order to move forward? Note - the [email removed] A record points to an IP address that is owned by Shopify, I’m assuming the mobile A record was added by Shopify. There’s also another IP address for www.aaaaautomotive.com also owned by Shopify, I’m assuming that was added by Shopify. It does not appear as a A record on GoDaddy.
Please let me know if there’s some action I can take to move this forward, as the DNS record has already propagated and what we seem to be waiting on is an SSL cert…
Thanks for reaching out here, @AAAAAutomotive , and for sharing the screenshots which were very helpful.
I took a look and I can see the issue, it is certainly with the two A records, as we only require one with a value of 23.227.38.65. So I have just highlighted using your image, what needs to be done, which I will share below.
Once you change your DNS settings, the change can take up to 72 hours for domain propagation to complete.