Why is my SSL still pending after two weeks on my new store?

Topic summary

SSL for custom domains should provision within 48 hours once DNS is correct. The OP saw “SSL pending” for two weeks; the cause was an extra dot in the domain settings, and fixing it resolved the issue.

Required DNS (A=IP mapping, CNAME=alias, AAAA=IPv6, CAA=issuer allowlist, DNSSEC=DNS signing):

  • One A record pointing to 23.227.38.65 for third‑party domains (Shopify‑managed transfers may show 23.227.38.70 and can be OK).
  • CNAME for www to shops.myshopify.com.
  • Remove AAAA and conflicting CAA records; disable DNSSEC.

Common fixes reported: remove duplicate A records or any A record for “www”; set the root name to [email removed] correct A to 23.227.38.65; delete [email removed] AAAA; wait up to 48 hours for propagation; ask the domain host to confirm their specific requirements.

Some cases required manual SSL provisioning by Shopify Support or were delayed by domain transfers (can take 10–20 days). One host cited restrictive CAA entries blocking issuance; outcome not shown.

Status indicators: green “Connected” in Online Store > Domains means SSL is active; “SSL pending/failed” signals issues. Multiple screenshots illustrated DNS and status. Many cases were resolved; a few remain in progress with Support.

Summarized with AI on January 3. AI used: gpt-5.

Hello I have Just gotten my Domain through Shopify, everything matches the info given above. But it still says pending, any clue why. roselynai.com