Skip to content
View Categories

AutoSSL Failure Email Explanation

1 min read

Hi

Thanks for getting in touch.

This email is letting you know that AutoSSL was unable to provide a 3rd party signed SSL certificate (which gives a padlock when visiting the https version of the site) for the listed domains/subdomains.

In order to issue a free LetsEncrypt certificate, LetsEncrypt has to validate that the requesting server has access to the parent DNS records of the domain requesting the certificate.

It can do this on our servers by either placing a requested file on the server so LetsEncrypt can check to see if that file exists at the domain (ie http://yourdomain.tld/check_if_this_file_exists) or alternatively if our server hosts the Parent DNS records LetsEncrypt can check for a DNS record instead.

As your domain is not pointed at GURU, when LetsEncrypt checks for the file, it is checking a different server so the file is not present. Additionally as we are not your parent name servers, when checking for the DNS record LetsEncrypt does not query ourselves.

As a result of both of these checks failing the listed domains/subdomains cannot be issued a certificate from LetsEncrypt and this is what the email is warning of.

If you do not need SSL coverage for these domains/subdomains then you can Exclude them from the check via cPanel > SSL/TLS Status and clicking Exclude from AutoSSL next to each one.

If you do require SSL coverage from AutoSSL that automatically renews when close to expiration, please ensure that you point your domain and the required subdomains at our own servers, or alternatively you can switch to using our name serveres.

I hope this clarifies, please let us know if we can assist further.

#signature
#cut