Why is my SSL still pending after two weeks on my new store?

Topic summary

SSL for custom domains should provision within 48 hours once DNS is correct. The OP saw “SSL pending” for two weeks; the cause was an extra dot in the domain settings, and fixing it resolved the issue.

Required DNS (A=IP mapping, CNAME=alias, AAAA=IPv6, CAA=issuer allowlist, DNSSEC=DNS signing):

  • One A record pointing to 23.227.38.65 for third‑party domains (Shopify‑managed transfers may show 23.227.38.70 and can be OK).
  • CNAME for www to shops.myshopify.com.
  • Remove AAAA and conflicting CAA records; disable DNSSEC.

Common fixes reported: remove duplicate A records or any A record for “www”; set the root name to [email removed] correct A to 23.227.38.65; delete [email removed] AAAA; wait up to 48 hours for propagation; ask the domain host to confirm their specific requirements.

Some cases required manual SSL provisioning by Shopify Support or were delayed by domain transfers (can take 10–20 days). One host cited restrictive CAA entries blocking issuance; outcome not shown.

Status indicators: green “Connected” in Online Store > Domains means SSL is active; “SSL pending/failed” signals issues. Multiple screenshots illustrated DNS and status. Many cases were resolved; a few remain in progress with Support.

Summarized with AI on January 3. AI used: gpt-5.

Hi, @Whiteski . Thanks for the screenshot!

Where is your domain being hosted? The DNS settings that are required to connect a third party domain are as follows:

Therefore, please edit your A Record to be as seen above. Additionally, there are a lot of other records within your settings. Did you add them in yourself? Do you know what they are for? For example you have two CNAME records, where the subdomain ‘shops.yourdomain.com’ is pointing to Shopify. If you’d prefer to have ‘www.yourdomain.com’ point to your store instead, then please update your CNAME as seen in the screenshot above and delete the other record.

I highly recommend contacting your domain provider to go over your DNS settings though. Let them know that you are wanting to point to your Shopify store, and provide them with the Help Doc for What to tell your third-party provider. They’ll be able to advise if there are any records that aren’t needed and can be deleted. Or, if there is any other requirement from their end that needs to be added. Once you’ve made the necessary changes to your DNS Settings, please allow up to 48 hours for the changes to take effect, within which time your SSL certificates should provision.

If your SSL continues to be unavailable after 48 hours after confirming your DNS Settings are correct, we’ll gladly take a look at it from our end and try to provision the certificates manually. We’ll need to access your account in order to do so. While we’re not able to provide account-specific support via the Shopify Community at this time, we’d be happy to continue assisting you through live chat, email, or callback. Please visit the Shopify Help Center and log in to your account to create a support request.

Since this is the next step I’ve marked this reply as the solution for the benefit of others who may discover this topic. Thanks!