The corporate domain has an invalid or insecure SSL certificate. What should I do?
Shortly after pointing the domain, it is normal for the corporate control panel to show an SSL certificate error for a few hours. If the error persists, the likely cause is incorrect or incomplete CAA records on the domain.
Wait for propagation
- After setting up the domain pointing, the domain can take up to 72 hours to work properly. It usually takes just a few hours.
- During the first few hours, when you access the corporate control panel, you may see an invalid SSL certificate error. Certificates can take up to 2 hours to propagate.
If the error persists, adjust the CAA record
You have two options. Carry out one of them in your domain's DNS zone editor.
Option 1: add the information to the CAA zone
- Open the domain's DNS zone editor.
- In the CAA zone, add the information from the table below.
| Record type | Value |
|---|---|
| CAA | issue "digicert.com" |
Option 2: remove the subdomain's CAA record
- Open the domain's DNS zone editor.
- Remove the CAA record from the subdomain that points to Adeus Pendrive's services.
Important: only remove the CAA record for this subdomain. You do not need to remove the CAA record for the main domain (root domain) entirely.
