I have my shop up and running and connected my third-party domain to Shopify. For the the main domain everything looks good: The domain is connected and SSL is working. However, the www-subdomain has status “SSL pending” and I get a 403 Forbidden response.
In DNS settings there’s only one A record and one CNAME record:
It’s hard to say definitively without checking the backend of your site. In which case, starting an authenticated support request with one of our advisors from our help center would be a solid start.
With that said, let me shed some light on the ‘pending’ status. An ‘SSL pending’ domain means the SSL certificate is still pending on that domain–meaning SSL is not ready to be active. Pending SSLs should naturally transition to ‘provisioned’ once the domains are added and pointing properly. To ensure your domain is pointing properly, double-check that the A record and CNAME records match up with Shopify’s requirements, here.
If there is anything else I can help you with, please let me know.