AutoSSL issuance fails when the domain does not resolve to the correct server, validation requests are blocked, or DNS records conflict with the expected hosting destination.
Common symptoms
- The domain stays unsecured
- AutoSSL reports validation failure
- Only one alias or subdomain fails to issue
Troubleshooting steps
- Confirm the domain and any included aliases resolve publicly to the hosting server.
- Disable conflicting proxy or CDN settings temporarily if the certificate authority cannot validate the domain.
- Make sure the domain is added correctly in cPanel and its document root responds over HTTP.
- Remove obsolete DNS records that point the same hostname to another environment.
- Re-run AutoSSL after DNS is corrected and propagation has completed.
Additional notes
- Certificates can fail for just one alias while the primary domain succeeds.
- Validation requires the certificate authority to reach the domain publicly.
When to contact support
Contact support if the domain resolves correctly but AutoSSL continues to fail.